2 results found Sort:

chainloop-dev
chainloop chainloop-dev
32
381
apache-2.0
11
Chainloop is an Open Source evidence store for your Software Supply Chain attestations, SBOMs, VEX, SARIF, CSAF files, QA reports, and more.
ospo sbom slsa spdx in-toto license security cyclonedx devsecops compliance attestation oss-compliance sbom-discovery slsa-provenance metadata-platform sbom-distribution regulated-industry open-source-licensing supply-chain-security
Created 2023-03-06
1,192 commits to main branch, last one 2 days ago
goreleaser
example-supply-chain goreleaser
11
54
mit
6
Example goreleaser + github actions config with keyless signing, SBOM generation, and attestations
go sbom slsa syft cosign golang signing sigstore goreleaser attestations supply-chain slsa-provenance software-bill-of-materials
Created 2021-12-22
114 commits to main branch, last one 6 days ago