software-supply-chain-security topic

An open-source tool for auditing your software supply chain stack for security compliance based on a new CIS Software Supply Chain benchmark.

aquasecurity

OpenSCA is an open source software supply chain security solution that supports the detection of open source dependencies, vulnerabilities and license compliance with a widely noticed accuracy by the...

XmirrorSecurity

Enabling Software Supply Chain Security Capabilities in ArgoCD

argoproj-labs

A compilation of resources in the software supply chain security domain, with emphasis on open source

bureado

Reference implementation of OpenPubkey

openpubkey

Compage - Low-Code Framework to develop Rest API, gRPC, dRPC, GraphQL, WebAssembly, microservices, FaaS, Temporal workloads, IoT and edge services, K8s controllers, K8s CRDs, K8s custom APIs, K8s Oper...

intelops

Cross-platform embeddable sandboxing

phylum-dev

:snake: :mag: GuardDog is a CLI tool to Identify malicious PyPI and npm packages

DataDog

A suite of utilities to help with software supply chain challenges on nix targets

tiiuae

A compilation of Software Supply Chain Security resources including initiatives, standards, regulations, organizations, vendors, tooling, books, articles and a plethora of learning resources from the...

vishalgarg-sec