Go
chainloop-dev/chainloop
SDLC evidence store and policy engine for your Software Supply Chain attestations, SBOMs, VEX, SARIF, QA reports, and more
Apache-2.0Sep 9, 2026 · metrics 2.10.0
All tags
Catalogue tag
#in-toto
Every repository in the public record carrying this tag — from its GitHub topics or the keywords its package registries publish. Health is measured under the same versioned methodology as the rest of the record.
8 records
Go
guacsec/guac
GUAC aggregates software security metadata into a high fidelity graph database.
Apache-2.0Oct 19, 2026 · metrics 2.10.0
PyPI · crates.io · Go +1
in-toto/attestation
in-toto Attestation Framework
Custom licenseOct 21, 2026 · metrics 2.10.0
Go
in-toto/in-toto-golang
A Go implementation of in-toto. in-toto is a framework to protect software supply chain integrity.
Custom licenseOct 21, 2026 · metrics 2.10.0
crates.io
jdx/packslip
A signed release manifest for vendor binaries
MITSep 18, 2026 · metrics 2.10.0
Packagist
k2gl/dsse
Sign and verify DSSE (Dead Simple Signing Envelope) payloads in PHP.
MITSep 13, 2026 · metrics 2.10.0
crates.io
greenticai/greentic-update
Greentic update platform foundation: signed update plans, installed-artifact catalogue/diff, staging, and airgap envelopes.
MITSep 17, 2026 · metrics 2.10.0
Go · PyPI
probityai/agent-evidence-vectors
Conformance vector suite and reference verifier for the adversarial-execution-evidence in-toto predicate
Apache-2.0Sep 20, 2026 · metrics 2.10.0