vaikas

policy-controller-test-543

Testing pulling policy-controller from sigstore/cosign

attestation-samples

This just contains various versions of attestations for testing things with different versions of cosign.

Auto-GPT

An experimental open-source attempt to make GPT-4 fully autonomous.

Cgroup-Manager-in-Rust

chains

Supply Chain Security in Tekton Pipelines

community-1

Knative governance and community material.

community-sigstore

General sigstore community repo

dockerfiles

A semi-random collection of odds and ends.

docs-1

Sigstore documentation

edu

Educational Resources for Software Supply Chain Security

enforce-events

go-tuf

Go implementation of The Update Framework (TUF)

grype

A vulnerability scanner for container images and filesystems

hello

Hello World in go

helm-charts-1

chainguard helm charts

homebrew-tap

Sigstore Homebrew Tap

justtrustme

ko

Build and deploy Go applications on Kubernetes

linkerd2

Ultralight, security-first service mesh for Kubernetes. Main repo for Linkerd 2.x.

pipeline

A K8s-native Pipeline resource.

policy-controller

postgres

Simple example showing how to use SQL Binding

protobom

A universal SBOM representation in protocol buffers

root-signing

scaffolding

Stuff to make standing up sigstore (esp. for testing) easier for e2e/integration testing.

sigstore

Common go library shared across sigstore services and clients

socket_vmnet

vmnet.framework support for unmodified rootless QEMU (no dependency on VDE)

stereoscope

go library for processing container images and simulating a squash filesystem

timestamp-authority

RFC3161 Timestamp Authority

trillian

A transparent, highly scalable and cryptographically verifiable data store.