loosebazooka

gradle-tutorial-for-reviewers

A simple gradle plugin development tutorial...

spdx-gradle-plugin

A prototype spdx gradle plugin

.allstar

.allstar repository configuration

artifact-registry-maven-tools

chains

Supply Chain Security in Tekton Pipelines

community

General sigstore community repo

community-1

Community documentation for the Tekton project

container-structure-test

validate the structure of your container images

cosign

Container Signing

fulcio

Sigstore WebPKI

fulcio-java-client

A simple fulcio java client for requesting certificates

go-oidc

A Go OpenID Connect client.

gradle-crash

A minimal project (copy of siteplugin example) to show a gradle crash

gradle-release

gradle-release is a plugin for providing a Maven-like release process for projects using Gradle

grpc-go

The Go language implementation of gRPC. HTTP/2 based RPC

hello-ko

Hello Ko App

java-sample-project

A sample Java project to showcase the Meterian scanner integration with GitHub actions

ossfuzz-gradle-plugin

plugin to simplify oss-fuzz for gradle project

platforms

Constraint values for specifying platforms and toolchains

protobuf-gradle-plugin

Protobuf Plugin for Gradle

protobuf-specs

Protocol Buffer specifications

rekor

Software Supply Chain Transparency Log

rekor-monitor

Purdue's Rekor monitor

scorecard

Security Scorecards - Security health metrics for Open Source

sigstore-java

java clients for sigstore

sigstore-python

A Sigstore client in Python

sigstore-scaffolding

Stuff to make standing up sigstore (esp. for testing) easier for e2e/integration testing.

slsa-java-test

An repo to test out slsa provenance generation for java projects

Spdx-Java-Library

Java library which implements the Java object model for SPDX and provides useful helper functions

test-sigstore-root

Test repo for creating sigstore root metadata