Jenkins plugin for Xygeni - End to end software development and delivery security

DockerCon23 Workshop on Secure Development with Docker

Sample CI/CD pipeline for creating container images with provenance details.

Repo to demonstrate scanning in different CI/CD tools using ReversingLabs Spectra Assure.

End-to-End Cybersecurity

fafnir-sec is an open-source tool that allows for the complete automation of launching different security tools detecting vulnerabilities in the application's code.

The Sonatype Platform Browser Extension

Capstone project assessing the current state of the software supply chain in open-source projects

An ongoing & curated collection of awesome software best practices and techniques, libraries and frameworks, E-books and videos, websites, blog posts, links to github Repositories, technical guidelines and important resources about Software in Cybersecurity

A CLI tool to analyze the behavior of your dependencies using listen.dev

Software signing just got easier

A reimplementation of LastPyMile: A Python-based library to Identify the differences between build artifacts of PyPI packages and the respective source code repository

Repository for the SBOM Harbor.

Software Supply Chain Attribute Integrity (SCAI) Demos and CLI tools

Sharing software supply chain security open source projects

in-toto is a framework to secure the software supply chain.

Enabling Software Supply Chain Security Capabilities in ArgoCD

Compage - Low-Code Framework to develop Rest API, gRPC, dRPC, GraphQL, WebAssembly, microservices, FaaS, Temporal workloads, IoT and edge services, K8s controllers, K8s CRDs, K8s custom APIs, K8s Operators, K8s hooks, etc. with minimal coding and by automatically applying best practice methods like software supply chain security measures, SBOM, …

Command line interface for the Phylum API

A suite of utilities to help with software supply chain challenges on nix targets