JAORMX

trusty-action

Trusty Dependency Risk Action

guac

GUAC aggregates software security metadata into a high fidelity graph database.

language

Grammar for the OpenFGA modeling language

helm-charts

Official Helm charts for the OpenFGA project.

openfga

A high performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar

minder-web

A web client for the minder control plane

trivy

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

stacklok-minder-types-ts

Typescript clients for Minder

frizbee

Throw a tag at and it comes back with a checksum.

minder-rules-and-profiles

A repository containing Minder rules and profiles recommended by your friends at Stacklok

datum

Datum's central server

minder

Software Supply Chain Security Platform

krakend-otel

KrakenD component for OpenTelemetry

root-signing

TUF repository for Sigstore trust root

sigstore

Common go library shared across sigstore services and clients

permissions-api

Permissions management service over SpiceDB

container-push

A re-usable GitHub workflow that will push a container to GHCR following best practices

identity-api

OAuth token exchange

krakend-ce

KrakenD Community Edition: High-performance, stateless, declarative, API Gateway written in Go.

fertilesoil

A general directory tree manager to build apps on

krakend

A helm chart to deploy krakend using the assumptions from the infratographer project

.github

Community information for Infratographer

rekor

Software Supply Chain Transparency Log

trillian

A transparent, highly scalable and cryptographically verifiable data store.

actuated

Blazingly fast CI runners

cosign

Code signing and transparency for containers and binaries

trivy-buildkite-plugin

docker-metadata-buildkite-plugin

A Buildkite plugin to set metadata for docker containers. This is meant to be used as a library plugin.

docker-build-buildkite-plugin

Buildkite plugin to build docker containers

scaffolding

Stuff to make standing up sigstore (esp. for testing) easier for e2e/integration testing.