Catalogue tag

#slsa

Every repository in the public record carrying this tag — from its GitHub topics or the keywords its package registries publish. Health is measured under the same versioned methodology as the rest of the record.

5 records

Tagged “slsa”Ranked by health index

85Excellenthealth index

chainloop-dev/chainloop

SDLC evidence store and policy engine for your Software Supply Chain attestations, SBOMs, VEX, SARIF, QA reports, and more

Go★ 570Jul 16, 2026

Apache-2.0Jul 16, 2026 · metrics 1.13.0

Go · PyPI

71Goodhealth index

felixgeelhaar/mnemos

Self-hosted memory + evidence layer for AI agents (Claude Code, Codex, Hermes, ...) — embeddable Go library, MCP / HTTP / CLI, evidence-backed claims, bitemporal recall, axi-go execution kernel with JSONL audit + token budgets, cosign-signed releases with SLSA L3 provenance. No vendor cloud, no per-call billing.

Go★ 3Jul 16, 2026

MITJul 16, 2026 · metrics 1.13.0

PyPI

68Moderatehealth index

cpeoples/ansible-security-scanner

🛡️ Static security scanner (SAST) for Ansible playbooks, roles, and collections. 1,000+ rules across 30+ categories detecting malicious code, RCE, hardcoded credentials, and supply-chain risk. Outputs SARIF, CycloneDX SBOM, and GitLab SAST. SLSA Build Level 3, Sigstore-signed.

Python★ 9↓ 1,928/moJul 17, 2026

Apache-2.0Jul 17, 2026 · metrics 1.13.0

66Moderatehealth index

carabiner-dev/bnd

Sign and package attestations in sigstore bundles

Go★ 10Jul 23, 2026

Apache-2.0Jul 23, 2026 · metrics 1.13.0

56Moderatehealth index

vulnetix/cli

Automate vulnerability triage which prioritizes remediation over discovery

Open Policy Agent · Go★ 25↓ 0/moJul 14, 2026

Custom licenseJul 14, 2026 · metrics 1.13.0