Repository Index

A vault for securely storing and accessing AWS credentials in development environments

• aws
• iam
• temporary-credentials
• keychain

Golang gRPC Middlewares: interceptor chaining, auth, logging, retries and more.

• grpc
• golang
• middleware
• generic-functions

Read-only developer endpoint scanner for on-disk package, extension, and developer-tool metadata, built to check exposure to known software supply-chain compromises.

• golang
• package-inventory
• supply-chain-security

A simple vaultless password manager in Go

• password-manager
• password-generator
• password-store
• keychain

Software Supply Chain Transparency Log

• supply-chain
• provenance
• security
• transparency-log

HellPot is a cross-platform portal to endless suffering meant to punish unruly HTTP bots.

• honeypot
• http
• web
• deception

Protect against malicious open source packages 🤖

• devsecops
• security
• supply-chain-security
• policy-as-code

Witness is a pluggable framework for software supply chain risk management. It automates, normalizes, and verifies software artifact provenance.

• security-tools
• security
• attestation
• verification

preflight helps you verify scripts and executables to mitigate chain of supply attacks such as the recent Codecov hack.

• devops
• devsecops
• security
• golang

A Go implementation of in-toto. in-toto is a framework to protect software supply chain integrity.

• in-toto
• software-supply-chain
• security

AWS Encryption SDK for Go

• aws
• aws-encryption-sdk
• aws-kms
• aws-sdk-go