Repository Index

A vault for securely storing and accessing AWS credentials in development environments

• aws
• iam
• temporary-credentials
• keychain

Software Supply Chain Transparency Log

• supply-chain
• provenance
• security
• transparency-log

HellPot is a cross-platform portal to endless suffering meant to punish unruly HTTP bots.

• honeypot
• http
• web
• deception

Protect against malicious open source packages 🤖

• devsecops
• security
• supply-chain-security
• policy-as-code

Witness is a pluggable framework for software supply chain risk management. It automates, normalizes, and verifies software artifact provenance.

• security-tools
• security
• attestation
• verification

preflight helps you verify scripts and executables to mitigate chain of supply attacks such as the recent Codecov hack.

• devops
• devsecops
• security
• golang

A Go implementation of in-toto. in-toto is a framework to protect software supply chain integrity.

• in-toto
• software-supply-chain
• security

AWS Encryption SDK for Go

• aws
• aws-encryption-sdk
• aws-kms
• aws-sdk-go