2 results found Sort:

chainloop-dev
chainloop chainloop-dev
32
391
apache-2.0
11
Evidence store for your Software Supply Chain attestations, SBOMs, VEX, SARIF, QA reports, and more
ospo sbom slsa spdx in-toto license security cyclonedx devsecops compliance attestation oss-compliance sbom-discovery slsa-provenance metadata-platform sbom-distribution regulated-industry open-source-licensing supply-chain-security
Created 2023-03-06
1,311 commits to main branch, last one 15 hours ago
goreleaser
example-supply-chain goreleaser
10
54
mit
4
Example goreleaser + github actions config with keyless signing, SBOM generation, and attestations
go sbom slsa syft cosign golang signing sigstore goreleaser attestations supply-chain slsa-provenance software-bill-of-materials
Created 2021-12-22
117 commits to main branch, last one 21 days ago