laurentsimon's repositories
slsa-on-github-test
Test for SLSA
argo-cd
Declarative continuous deployment for Kubernetes.
attestation
in-toto Attestation Framework
cosign
Container Signing
gato
GitHub Self-Hosted Runner Enumeration and Attack Tool
goproxy
An HTTP proxy library for Go
goreleaser
Deliver Go binaries as fast and easily as possible
jupyter_client
Jupyter protocol client APIs
macaron
Macaron is a supply chain security analysis tool from Oracle Labs that checks conformance to SLSA framework.
rekor
Software Supply Chain Transparency Log
s3cme
Template Go app repo with local test/lint/build/vulnerability check workflow, and on tag image test/build/release pipelines, with ko generative SBOM, cosign attestation, and SLSA build provenance
sigstore-python
A codesigning tool for Python packages
slsa
Supply-chain Levels for Software Artifacts
starter-workflows
Accelerating new GitHub Actions workflows