22 results found Sort:
- Filter by Primary Language:
- Go (6)
- Java (4)
- Python (3)
- C (2)
- Rust (1)
- Solidity (1)
- TypeScript (1)
- C# (1)
- CMake (1)
- Kotlin (1)
- +
Spoof locked bootloader on local attestations
Created
2023-09-18
19 commits to main branch, last one about a month ago
Hardware-based attestation / intrusion detection app for Android devices. It provides both local verification with another Android device via QR codes and optional scheduled server-based verification ...
Created
2018-01-30
860 commits to main branch, last one 5 days ago
A CNCF Project to Bootstrap & Maintain Trust on the Edge / Cloud and IoT
Created
2016-10-19
1,816 commits to master branch, last one 19 hours ago
Witness is a pluggable framework for software supply chain risk management. It automates, normalizes, and verifies software artifact provenance.
Created
2021-12-03
315 commits to main branch, last one 4 days ago
Chainloop is an Open Source evidence store for your Software Supply Chain attestations, SBOMs, VEX, SARIF, CSAF files, QA reports, and more.
Created
2023-03-06
671 commits to main branch, last one 22 hours ago
Confidential Computing Zoo provides confidential computing solutions based on Intel SGX, TDX, HEXL, etc. technologies.
Created
2021-11-25
532 commits to main branch, last one 10 days ago
inVtero.net: A high speed (Gbps) Forensics, Memory integrity & assurance. Includes offensive & defensive memory capabilities. Find/Extract processes, hypervisors (including nested) in memory dumps u...
Created
2011-04-29
183 commits to master branch, last one 9 months ago
A compilation of resources in the software supply chain security domain, with emphasis on open source
sbom
devsecops
attestation
awesome-list
cve-scanning
dependencies
oss-compliance
static-analysis
package-management
reproducible-builds
supply-chain-attacks
dependency-management
software-supply-chain
supply-chain-security
security-vulnerability
vulnerability-scanning
vulnerability-management
software-composition-analysis
software-supply-chain-security
Created
2022-02-20
447 commits to main branch, last one about a year ago
in-toto Attestation Framework
Created
2021-04-01
634 commits to main branch, last one 22 hours ago
Verax is a shared registry for storing attestations of public interest on EVM chains, designed to enhance data discoverability and consumption for dApps across the network.
Created
2023-07-05
288 commits to dev branch, last one 15 hours ago
attestation.app remote attestation server. Server code for use with the Auditor app: https://github.com/GrapheneOS/Auditor. It provides two services: submission of attestation data samples and a remot...
Created
2018-03-17
1,644 commits to main branch, last one 21 hours ago
MultiZone® Security TEE is the quick and safe way to add security and separation to any RISC-V processors. The RISC-V standard ISA doesn't define TrustZone-like primitives to provide hardware separati...
Created
2018-12-21
250 commits to master branch, last one 5 months ago
📜 "Coinbase Verifications" is a set of Coinbase-verified onchain attestations that enable access to apps and other onchain benefits.
Created
2023-11-07
11 commits to main branch, last one 3 months ago
Python implementation of OWASP CycloneDX
Created
2021-08-27
654 commits to main branch, last one 5 days ago
Server-side library to validate the authenticity of Apple App Attest artifacts, written in Kotlin.
Created
2020-08-15
198 commits to main branch, last one about a year ago
A highly configurable build executor and observer designed to generate signed SLSA provenance attestations about build runs.
Created
2022-07-09
714 commits to main branch, last one a day ago
(Android) Hide encrypted secret API keys in C/C++ code, retrieve and decrypt them via JNI. Google SafetyNet APIs example.
Created
2017-06-23
49 commits to master branch, last one 4 years ago
Calculate AMD SEV/SEV-ES/SEV-SNP measurement for confidential computing
Created
2022-03-08
125 commits to main branch, last one 10 days ago
Attestation and Secret Delivery Components
Created
2022-04-25
621 commits to main branch, last one a day ago
Documentation source and development of the PSA Certified API
Created
2022-09-06
340 commits to main branch, last one about a month ago
Template Go app repo with local test/lint/build/vulnerability check workflow, and on tag image test/build/release pipelines, with ko generative SBOM, cosign attestation, and SLSA build provenance
Created
2023-01-12
330 commits to main branch, last one 5 months ago
vexctl is a tool to attest VEX impact statements
This repository has been archived
(exclude archived)
Created
2022-08-27
166 commits to main branch, last one about a year ago