Pinned Loading

1. in-toto/witness in-toto/witness Public

   Witness is a pluggable framework for software supply chain risk management. It automates, normalizes, and verifies software artifact provenance.

   Go 519 75

2. aflock-ai/aflock aflock-ai/aflock Public

   Cryptographically signed policies for AI agent execution constraints

   Go 19 1

3. otter otter Public

   otter 🦦 - An open-source SBOM & vulnerability analyzer. ( In Progress)

   Go 1

4. dfc-ui dfc-ui Public

   dfc-ui(chainguard): UI to convert Dockerfiles to use Chainguard Images

   TypeScript 6 1

5. kubestellar/ui kubestellar/ui Public

   KubeStellar's User Interface

   TypeScript 175 228

6. k8s-custom-controller k8s-custom-controller Public

   Kubernetes Custom Controller + Admission Webhook for CVE Scan (In Progress)

   Go 3