zosocanuck

kubernetes-demos

confidential-containers

Confidential Containers Community

kyverno-notation-venafi

Kyverno extension service for Notation and the notation-venafi-csp

vssh-cli

vSSH is a command line utility which can help system administrators to request SSH credentials for authentication to their servers, request SSH credentials for the application or hosts that they manage.

awesome-post-quantum

A curated list of resources about post-quantum cryptography

guac

GUAC aggregates software security metadata into a high fidelity graph database.

notation-action

GitHub Actions for signing and verifying artifacts with Notation

VenafiCodesignTask

minder

Software Supply Chain Security Platform

notation

A CLI tool to sign and verify artifacts

notation-plugin-framework-go

Contains framework or base for notation plugins

homebrew-tap

Homebrew tap for Venafi tools

sigscan

Signature Discovery Utility

k8s-manifest-sigstore

kubectl plugin for signing Kubernetes manifest YAML files with sigstore

graphene

A simple layer for interacting with PKCS #11 / PKCS11 / CryptoKI for Node in TypeScript. (Keywords: Javascript, PKCS#11, Crypto, Smart Card, HSM)

verify-image-signatures

A Kubewarden Policy that verifies all the signatures of the container images referenced by a Pod

ratify

Artifact Ratification Framework

notation-azure-kv

Azure Provider for Notation CLI

notation-go

A collection of libraries for supporting sign and verify OCI artifacts. Based on Notary Project specifications.

cosign-installer

Cosign Github Action

regclient

Docker and OCI Registry Client in Go and tooling using those libraries.

cosign-gatekeeper-provider

🔮 ✈️ to integrate OPA Gatekeeper's new ExternalData feature with cosign to determine whether the images are valid by verifying their signatures

blueprint-securesoftwarepipeline

For engineers and security teams driving fast and secure software supply chains

pyrsia

Decentralized Package Network

go-p11-kit

PKCS #11 modules in Go without cgo

grype

A vulnerability scanner for container images and filesystems

syft

CLI tool and library for generating a Software Bill of Materials from container images and filesystems

minisign

A dead simple tool to sign files and verify digital signatures.

kyverno

Kubernetes Native Policy Management

VenafiPS

Powershell module to fully automate your Venafi TLS Protect Datacenter and Cloud platforms!