rode

rode-legacy

cloud native software supply chain ☁️🔗

rode

Rode facilitates Automated Governance in your software supply chain. This repository contains the rode API which is the primary interface between the rode UI or rode Collectors and metadata storage in Grafeas. The rode API provides functions for metadata search and storage as well as policy creation and evaluation.

grafeas-elasticsearch

An implementation of the Grafeas storage backend based on Elasticsearch

rode-ui

User Interface application for rode that enables metadata discovery and policy creation/evaluation.

charts

Collection of helm charts used to deploy the components of rode Automated Governance. Rode, Rode UI, Harbor and Collector, Grafeas, Elasticsearch

demo

This repository contains Terraform to stand up Rode along with a Jenkins instance and sample pipeline to demonstrate or evaluate Rode functionality.

terraform-provider-rode

A Terraform provider for Rode

collector-build

A generic build collector for Rode

create-build-occurrence-action

demo-app-deployment

proto

Experimental Rode protobufs

.github

collector-clair

A rode collector for clair scans

collector-coverity

collector-ecr

collector-harbor

collector-image-scanner

A collector for container image vulnerabilities

collector-sonarqube

collector-tfsec

Generates vulnerability occurrences from a tfsec report

demo-app

Repository for the app used in the Rode Demo

enforcer-action

enforcer-k8s

es-index-manager

A Go library for creating Elasticsearch indices and applying mapping changes.

new-collector-template

Project boilerplate for creating new collectors

rode-dev-env

A local and CI environment for running Rode.