Go
chainloop-dev/chainloop
SDLC evidence store and policy engine for your Software Supply Chain attestations, SBOMs, VEX, SARIF, QA reports, and more
Apache-2.0Sep 9, 2026 · metrics 2.10.0
All tags
Catalogue tag
#attestation
Every repository in the public record carrying this tag — from its GitHub topics or the keywords its package registries publish. Health is measured under the same versioned methodology as the rest of the record.
56 records
PyPI
CycloneDX/cyclonedx-python-lib
Functionality and DataModels of OWASP CycloneDX for Python
Apache-2.0Sep 9, 2026 · metrics 2.10.0
crates.io
confidential-containers/trustee
Attestation and Secret Delivery Components
Apache-2.0Oct 19, 2026 · metrics 2.10.0
npm
actions/toolkit
The GitHub ToolKit for developing GitHub Actions.
MITAug 28, 2026 · metrics 2.10.0
PyPI · npm
sipyourdrink-ltd/bernstein
The open‑source AI Agents Governance & Orchestration framework: write the rules declaratively, Bernstein enforces them and produces the verifiable, replayable record. Free, Apache-2.0. https://bernstein.run
Apache-2.0Sep 14, 2026 · metrics 2.10.0
crates.io
tkhq/qos
QuorumOS is a computation layer for running applications inside Trusted Execution Environments (TEEs)
AGPL-3.0Sep 9, 2026 · metrics 2.10.0
Go
kubernetes-sigs/tejolote
A highly configurable build executor and observer designed to generate signed SLSA provenance attestations about build runs.
Apache-2.0Sep 13, 2026 · metrics 2.10.0
PyPI · crates.io
Rul1an/assay
Open evidence profile for MCP tool actions. Enforce configured tool-call policies and record decisions and observations in offline-verifiable bundles. Optional Linux kernel controls. No hosted backend required.
MITOct 13, 2026 · metrics 2.10.0
PyPI · npm
agentrust-io/trace-spec
TRACE: Trust Runtime Attestation and Compliance Evidence. Open attestation standard for agentic AI governance.
Custom licenseOct 22, 2026 · metrics 2.10.0
Go
carabiner-dev/ampel
🔴🟡🟢 The Amazing Multipurpose Policy Engine (and L)
Apache-2.0Sep 12, 2026 · metrics 2.10.0
PyPI · crates.io · Go +1
in-toto/attestation
in-toto Attestation Framework
Custom licenseOct 21, 2026 · metrics 2.10.0
PyPI
vaaraio/vaara
Accountable Autonomy: open-source evidence layer that gates every AI agent tool call against your policy and writes a hash-chained record an auditor verifies offline, without trusting you. Root-agnostic; binds to TPM 2.0 / SEV-SNP when present. Your environment, no SaaS, no telemetry. AGPL-3.0.
AGPL-3.0Oct 20, 2026 · metrics 2.10.0
crates.io
worldcoin/pontifex
Rust library for building and interacting with AWS Nitro enclaves.
MITOct 20, 2026 · metrics 2.10.0
crates.io
Azure/corim
Rust Implementation of CoRIM (Concise Reference Integrity Manifest)
Custom licenseSep 15, 2026 · metrics 2.10.0
PyPI
agentrust-io/trace-tests
TRACE compliance test suite. Conformance tests for TRACE Certification.
Apache-2.0Oct 3, 2026 · metrics 2.10.0
crates.io
tkhq/rust-sdk
Repository containing Rust tooling to interact with the Turnkey API
Apache-2.0Oct 21, 2026 · metrics 2.10.0
PyPI
agentrust-io/agent-manifest
Agent Manifest SDK. Hardware-anchors all 10 artifacts defining an agent at deployment. Python and TypeScript.
Apache-2.0Sep 15, 2026 · metrics 2.10.0
crates.io
censgate/redact
Fast Rust engine for detecting and redacting PII and secrets — in prompts, code, and databases. OpenAI-compatible gateway, Postgres scanner, CLI, and WASM. 32× Presidio. Apache-2.0.
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Go
liatrio/autogov
Unified CLI for software supply-chain governance / verify GitHub artifact attestations, evaluate OPA/Rego policies, generate SLSA Verification Summary Attestations (VSAs), and manage releases.
Apache-2.0Sep 15, 2026 · metrics 2.10.0
crates.io · npm · PyPI +1
Phala-Network/dcap-qvl
No repository description published.
MITSep 13, 2026 · metrics 2.10.0
npm · crates.io · PyPI
evervault/attestation-doc-validation
A rust crate for validating attestation documents provided by Trusted Execution Environments. Current support is limited to AWS Nitro Enclaves.
Apache-2.0Oct 19, 2026 · metrics 2.10.0
PyPI
sectum-ai/sectum-ai
AI data-isolation verification — prove no user or customer can reach another's data across 13 AI surfaces, with tamper-evident evidence anyone can verify.
Apache-2.0Sep 9, 2026 · metrics 2.10.0
npm
tinfoilsh/tinfoil-js
Tinfoil JavaScript / TypeScript Client supporting the OpenAI API standard
Apache-2.0Sep 10, 2026 · metrics 2.10.0
npm · Go · crates.io
automata-network/automata-dcap-attestation
This repo contains Web3 Implementation of Intel DCAP Quote Verification For Various Ecosystems
MITSep 10, 2026 · metrics 2.10.0
PyPI
b7n0de/proofbundle
Offline cryptographic receipts for AI evaluation results — Ed25519 + RFC 6962 Merkle + optional SD-JWT. Integrity, not truth
MITSep 13, 2026 · metrics 2.10.0
npm · PyPI
delimit-ai/delimit-mcp-server
The merge gate for AI-written code, with signed, replayable attestation. Works across Claude Code, Codex, Cursor, and Gemini CLI.
MITSep 16, 2026 · metrics 2.10.0
npm · crates.io · Go
zerkerlabs/treeship
Portable trust receipts for agent workflows. Signed, chained, verifiable.
Apache-2.0Oct 1, 2026 · metrics 2.10.0
Go
carabiner-dev/bnd
Sign and package attestations in sigstore bundles
Apache-2.0Sep 13, 2026 · metrics 2.10.0
npm
bradford-tech/supabase-integrity-attest
Apple App Attest verification library for Supabase Edge Functions. WebCrypto only, no Node.js dependencies
MITSep 18, 2026 · metrics 2.10.0
RubyGems
cedarcode/tpm-key_attestation
TPM 2.0 Key Attestation validation in ruby
Apache-2.0Sep 13, 2026 · metrics 2.10.0