Python
in-toto/friends
Friends of in-toto! A place to record integrations and adoptions of the in-toto specification.
Stars: 22Forks: 24Updated Oct 9, 2026
Security
Cloud security, identity, defensive tools, and security research.
Bookmarks for reference; inclusion does not indicate testing or a recommendation.
Repositories
Filters need JavaScript. You can browse the repositories and pages below.
Page 2. 83 repositories in this topic.
Python
in-toto/demo
Securing Alice's, Bob's and Carl's software supply chain using in-toto
Stars: 108Forks: 43Updated Sep 28, 2026
ossf/s2c2f
The S2C2F Project is a group working within the OpenSSF's Supply Chain Integrity Working Group formed to further develop and continuously improve the S2C2F guide which outlines and defines how to securely consume Open Source Software (OSS) dependencies into the developer’s workflow.
Stars: 245Forks: 34Updated Oct 10, 2026
Rust
in-toto/attestation
in-toto Attestation Framework
Stars: 386Forks: 131Updated Oct 17, 2026
attestationsoftware-supply-chain-security
sigstore/cosign-installer
Cosign Github Action
Stars: 213Forks: 67Updated Oct 13, 2026
cosign
Go
sigstore/cosign
Code signing and transparency for containers and binaries
Stars: 6,369Forks: 826Updated Oct 17, 2026
Jupyter Notebook
secure-systems-lab/dsse
A specification for signing methods and formats used by Secure Systems Lab projects.
Stars: 113Forks: 25Updated Oct 16, 2026
Go
kyverno/kyverno
Unified Policy as Code
Stars: 8,259Forks: 1,666Updated Oct 18, 2026
compliancegovernance
Python
in-toto/in-toto
in-toto is a framework to protect supply chain integrity.
Stars: 1,052Forks: 170Updated Oct 17, 2026
new-york-universitysecure-systems-lab
theodo-group/awesome-security-automation
Awesome links to automate your cybersecurity checks
Stars: 43Forks: 6Updated Sep 25, 2026
securitysecurity-audit
Java
theodo-group/spring-access-inspector
CLI tool and maven plugin tool to list access control on your SpringBoot application
Stars: 59Forks: 0Updated Jul 7, 2026
JavaArchived
sigstore/sigstore-maven-plugin
sigstore maven plugin
Stars: 19Forks: 11Updated Dec 17, 2025
Go
numberly/vault-db-injector
The Vault DB Injector automates secure database credential management in Kubernetes using Hashicorp Vault, providing credential injection, renewal, and revocation for pods.
Stars: 50Forks: 3Updated Oct 5, 2026
databasedatabases
Go
slsa-framework/slsa-github-generator
Language-agnostic SLSA provenance generation for Github Actions
Stars: 604Forks: 191Updated Oct 15, 2026
securitysecurity-hardening
actions/attest-build-provenance
Action for generating build provenance attestations for workflow artifacts
Stars: 1,055Forks: 867Updated Oct 17, 2026
Go
dexidp/dex
OpenID Connect (OIDC) identity and OAuth 2.0 provider with pluggable connectors
Stars: 11,195Forks: 2,006Updated Oct 16, 2026
hacktoberfestidentity-provider
Archived
stacklok/sigstore-the-hard-way
sigstore the hard way!
Stars: 121Forks: 25Updated Oct 16, 2026
cosignsigstore
Go
sigstore/scaffolding
Stuff to make standing up sigstore (esp. for testing) easier for e2e/integration testing.
Stars: 89Forks: 69Updated Oct 16, 2026
Go
sigstore/rekor-monitor
Log monitor for Rekor to verify immutability and monitor entries
Stars: 58Forks: 35Updated Oct 13, 2026
Go
sigstore/sigstore-probers
Probers for sigstore infrastructure
Stars: 6Forks: 18Updated Oct 15, 2026
Go
jpillora/chisel
A fast TCP/UDP tunnel over HTTP
Stars: 16,660Forks: 1,618Updated Oct 17, 2026
golanghttp
Go
google/trillian
A transparent, highly scalable and cryptographically verifiable data store.
Stars: 3,759Forks: 467Updated Oct 16, 2026
certificate-transparencymerkle-tree
Go
theupdateframework/go-tuf
Go implementation of The Update Framework (TUF)
Stars: 720Forks: 133Updated Oct 15, 2026
chaingo
Go
sigstore/fulcio
Sigstore OIDC PKI
Stars: 890Forks: 191Updated Oct 16, 2026
Go
grafeas/grafeas
Artifact Metadata API
Stars: 1,569Forks: 307Updated Sep 25, 2026
Rust
parallaxsecond/parsec
Platform AbstRaction for SECurity service
Stars: 517Forks: 75Updated Sep 16, 2026
Shell
wolfi-dev/os
Main package repository for production Wolfi images
Stars: 1,296Forks: 445Updated Oct 16, 2026
wolfi
Go
openfga/openfga
A high-performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar.
Stars: 5,994Forks: 527Updated Oct 18, 2026
abacaccess-control
Python
mitmproxy/mitmproxy
An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.
Stars: 45,703Forks: 4,822Updated Oct 18, 2026
debugginghttp
in-toto/community
in-toto is a framework to secure the software supply chain.
Stars: 74Forks: 11Updated Sep 28, 2026
cncfin-toto
Rust
epi052/feroxbuster
A fast, simple, recursive content discovery tool written in Rust.
Stars: 8,125Forks: 635Updated Oct 17, 2026
content-discoveryenumeration
Go
owasp-amass/amass
In-depth attack surface mapping and asset discovery
Stars: 15,370Forks: 2,199Updated Oct 18, 2026
attack-surfacesdns
Go
blackbird-eu/community-scripts
A set of open-source community scripts
Stars: 63Forks: 6Updated May 18, 2026
C
cilium/tetragon
eBPF-based Security Observability and Runtime Enforcement
Stars: 5,080Forks: 625Updated Oct 17, 2026
bpfebpf
Makefile
cilium/hubble
Hubble - Network, Service & Security Observability for Kubernetes using eBPF
Stars: 4,369Forks: 305Updated Oct 16, 2026
ciliumebpf
Python
aquasecurity/kube-hunter
Hunt for security weaknesses in Kubernetes clusters
Stars: 5,087Forks: 612Updated Oct 16, 2026
hacktoberfestkubernetes-clusters