John Kjell's repositories
carvel-imgpkg
Store application configuration files in Docker/OCI registries
clomonitor
CLOMonitor is a tool that periodically checks open source projects repositories to verify they meet certain project health best practices
community
General sigstore community repo
cosign
Container Signing
friends
Friends of in-toto! A place to record integrations and adoptions of the in-toto specification.
fulcio
Sigstore OIDC PKI
go-securesystemslib
Cryptographic and general-purpose routines for Golang Secure Systems Lab projects at NYU
people
Stores the data that will populate the various people listings on cncf.io
specification
The Update Framework specification
spring-petclinic-microservices
Distributed version of Spring Petclinic built with Spring Cloud
ssc-reading-list
A reading list for software supply-chain security.
swf
A demo software factory
taps
TUF Augmentation Proposals (TAPs)
typhoon
Minimal and free Kubernetes distribution with Terraform