Software Supply Chain Transparency Log
- supply-chain
- provenance
- security
- transparency-log
Repository Index
47,133 repositories indexed
1–5 of 5 · Most stars
Protect against malicious open source packages 🤖
Witness is a pluggable framework for software supply chain risk management. It automates, normalizes, and verifies software artifact provenance.
- security-tools
- security
- attestation
- verification
preflight helps you verify scripts and executables to mitigate chain of supply attacks such as the recent Codecov hack.
A Go implementation of in-toto. in-toto is a framework to protect software supply chain integrity.
- in-toto
- software-supply-chain
- security