cpanato

github-actions-dashboard

GitHub Actions Dashboard

bom

A utility to generate SPDX-compliant Bill of Materials manifests

zeitgeist

Zeitgeist: the language-agnostic dependency checker

actions

A collection of reusable Github Actions workflows.

advisories

Security advisory data for Wolfi

apko

cluster-api-provider-gcp

The GCP provider implementation for Cluster API

cluster-api-provider-packet

Cluster Management API provider for Packet

community-2

General sigstore community repo

e2e-framework

An experimental e2e testing framework for Kubernetes clusters.

goreleaser

Deliver Go binaries as fast and easily as possible

hakn

A High-Availability distribution of Knative.

helm-sigstore

Plugin for Helm to integrate the sigstore ecosystem

inlets.dev

Website and blog - inlets.dev

k8s.io

Kubernetes files for various *.k8s.io sites

keptn

Keptn is a message-driven control-plane for application delivery and automated operations

kind

Kubernetes IN Docker - local clusters for testing Kubernetes

kubernetes

Production-Grade Container Scheduling and Management

parsers

Language and ecosystem parsers

policy-controller

rekor-operator

Operator for Rekor

release

Release infrastructure for Kubernetes and related components

release-sdk

scaffolding

Stuff to make standing up sigstore (esp. for testing) easier for e2e/integration testing.

scorecard

Security Scorecards - Security health metrics for Open Source

sigstore-js

Code-signing for npm packages

test-infra

Test infrastructure for the Kubernetes project.

timestamp-authority

Sigstore RFC3161 Timestamp Authority

vex

vexctl is a tool to attest VEX impact statements

wolfi-dev-tools

Various tools, images, etc. to support the Wolfi OSS project