nsmith5

Nathan Smith's starred repositories

v86

x86 PC emulator and x86-to-wasm JIT, running in the browser

Language:JavaScriptBSD-2-Clause19496 348 726

cosign

Code signing and transparency for containers and binaries

Language:GoApache-2.04295 52 958

woodpecker

Woodpecker is a simple yet powerful CI/CD engine with great extensibility.

Language:GoApache-2.03974 33 1345

go-systemd

Go bindings to systemd socket activation, journal, D-Bus, and unit files

Language:GoApache-2.02397 52 132

apko

Build OCI images from APK packages directly without Dockerfile

Language:GoApache-2.01137 14 230

gitsign

Keyless Git signing using Sigstore

Language:GoNOASSERTION918 15 70

protovalidate

Protocol Buffer Validation - Go, Java, Python, and C++ Beta Releases!

Language:GoApache-2.0769 15 79

osquery-defense-kit

Production-ready detection & response queries for osquery

Language:MakefileApache-2.0510 11 6

noise

Go implementation of the Noise Protocol Framework

Language:GoNOASSERTION508 20 16

booster

Fast and secure initramfs generator

Language:GoMIT487 17 192

sigstore

Common go library shared across sigstore services and clients

Language:GoApache-2.0441 16 107

witness

Witness is a pluggable framework for software supply chain risk management. It automates, normalizes, and verifies software artifact provenance.

Language:GoApache-2.0398 25 163

melange

build APKs from source code

Language:GoApache-2.0387 11 207

krata

krata is an isolation engine for securing compute workloads

Language:RustApache-2.0234 8 62

tlogdb

Reusable transparent log database

Language:GoBSD-3-Clause144 90

witchery

build distroless images with alpine tools

Language:ShellNOASSERTION128 70

sigstore-the-hard-way

sigstore the hard way!

Apache-2.0111 8 8

cilium-service-mesh-beta

Instructions and issue tracking for Service Mesh capabilities of Cilium

Apache-2.0105 34 14

dsse

A specification for signing methods and formats used by Secure Systems Lab projects.

Language:Jupyter NotebookApache-2.063 20 35

scaffolding

Stuff to make standing up sigstore (esp. for testing) easier for e2e/integration testing.

Language:HCLApache-2.057 9 60

tejolote

A highly configurable build executor and observer designed to generate signed SLSA provenance attestations about build runs.

Language:GoApache-2.055 6 4

linux-fullhistory

Full history of Linux created by Yoann Padioleau and Rob Landley. See the wiki for usage instructions.

Language:CNOASSERTION54 60

ttp-bench

Adversary emulation for EDR/SIEM testing (macOS/Linux)

Language:GoApache-2.034 4 2

supply-chain-synthesis

Collating an overview of the open source software supply chain landscape -- and synthesizing that survey in a hopefully-useful way.

Apache-2.032 80

jsonptr

JSON Pointer (RFC 6901) for Go

Language:GoApache-2.029 4 3

clank

Simple tool that allows you to detect imposter commits in GitHub Actions workflows.

Language:GoApache-2.020 5 1

hakn

A High-Availability distribution of Knative.

Language:GoApache-2.020 1 5

tlogistry

Transparenty Immutable Container Image Tags

Language:GoApache-2.019 20

actions

GitHub actions for the chainguard-images

Language:GoApache-2.016 17 19

smimecosign

Keyless Git signing with cosign!

Language:GoApache-2.011 20