Appu

A very simple gradle appengine application

No description.

appengine xml -> yaml converter

A simple gradle plugin development tutorial...

No description.

A prototype spdx gradle plugin

The Great Multi-Factor Authentication (MFA) Distribution Project of the Open Source Security Foundation (OpenSSF). We work to distribute hardware MFA tokens to critical open source software (OSS) projects.

Test project using jib-core to build from dockerfiles

No description.

A guide and some scripts to get local go applications to use a self signed cert for testing

An action to verify the checksum of a io.takari wrapper jar against maven central

A reproduction of a dependency resolution issue for sigstore-java when updating to gradle 8.4.14

TUI for reviewing AI-generated code and plans

Probers for sigstore infrastructure

Picocli is a modern framework for building powerful, user-friendly, GraalVM-enabled command line apps with ease. It supports colors, autocompletion, subcommands, and more. In 1 source file so apps can include as source & avoid adding a dependency. Written in Java, usable from Groovy, Kotlin, Scala, etc.

Helm charts for sigstore project

Terraform modules for Sigstore cloud infrastructure

OpenID Connect (OIDC) identity and OAuth 2.0 provider with pluggable connectors

.allstar repository configuration

Specification of sigstore's architecture in an IETF internet-draft format

No description.

Staging TUF repository for Sigstore trust root

Go library for Sigstore signing and verification

Conformance testing for Sigstore clients

Content of the Bazel blog

Run static analysis tools with Bazel

Verify provenance from SLSA compliant builders

Gradle plugin for building Apache Maven plugins

Protocol Buffer specifications

java clients for sigstore

A GitHub app that mirrors releases of your Bazel ruleset to the Central Registry

Common go library shared across sigstore services and clients

artifact attestation test

Signature Transparency Log designed for ease of use, low cost, and minimal maintenance

a test bcr module for generating provenance

The central registry of Bazel modules for the Bzlmod external dependency system.

TUF client conformance test suite

Sigstore documentation

Codebase for sigstore.dev

in-toto Attestation Framework

Apache Maven GPG Plugin

sigstore maven plugin

Bazel rules for building OCI containers

validate the structure of your container images

Community documentation for the Tekton project

A sample Java project to showcase the Meterian scanner integration with GitHub actions

Java library which implements the Java object model for SPDX and provides useful helper functions

Container Signing

General sigstore community repo

Software Supply Chain Transparency Log

Constraint values for specifying platforms and toolchains

plugin to simplify oss-fuzz for gradle project

A minimal project (copy of siteplugin example) to show a gradle crash

A Sigstore client in Python

Protobuf Plugin for Gradle

Purdue's Rekor monitor

gradle-release is a plugin for providing a Maven-like release process for projects using Gradle

An repo to test out slsa provenance generation for java projects

Security Scorecards - Security health metrics for Open Source

Test repo for creating sigstore root metadata

Hello Ko App

No description.

Stuff to make standing up sigstore (esp. for testing) easier for e2e/integration testing.

The Go language implementation of gRPC. HTTP/2 based RPC

Sigstore WebPKI

A Go OpenID Connect client.

A simple fulcio java client for requesting certificates

Automatically generated rekor-java-client from rekor/openapi.yaml

Supply Chain Security in Tekton Pipelines

This repository contains a template you can use to seed a repository for a new open source project.

Cook times for various grains in an instant pot

No description.

No description.

A repo to mess around with actions issue creation

A simple test project that causes confusing mockito failures

Kubernetes Native Container Build Service

Web content for Cloud Native Buildpacks

Just a sample repo for a bug

No description.

test-backend-for-studio

No description.

Sample project that surfaces list serialization issues with gradle model and task inputs