SantiagoTorres

kvmstuff

rekor-stats

ayy5519

in-toto

in-toto is a framework to protect supply chain integrity.

push-certificate-example

spdx-linking-mockups

arch-security-tracker

Arch Linux Security Tracker

archlinuxmx-keyring

cosign

Container Signing

foundation

☁️♮🏛File non-technical issues related to CNCF

git-lfs-demo

githook-provenance

githook for into attestations

in-toto-golang

A go implementation of in-toto verifylib

ITE

ite-4-demo-test-repo

keylime

A CNCF Project to Bootstrap & Maintain Trust on the Edge / Cloud and IoT

kubesec

Security risk analysis for Kubernetes resources

official-images

Primary source of truth for the Docker "Official Images" program

projectrekor.github.io

Rekor website

rcodi-blog

RCODI Blog

rebuilderd

Independent verification of binary packages - reproducible builds

rekor-cli

CLI for rekor

rekor-monitor

Log monitor for Rekor to verify immutability and monitor entries

rms-open-letter.github.io

root-signing

SantiagoTorres.github.io

sec-deadlines.github.io

Deadline countdowns for academic conferences in Security and Privacy

sigstore

Common go library shared across sigstore services and clients

toc

⚖️Technical Oversight Committee (TOC)

VIP-rekor-monitor