Tools
rekor
sigstore/rekor
Rekor is Sigstore's tamper-resistant transparency log for software supply-chain metadata, offering a REST API and CLI to record, query, and verify signed artifacts.
Topics
Related projects
guac1.6kGUAC aggregates software supply chain security metadata such as SBOMs, attestations, and vulnerabilities into a unified graph, giving security teams a queryable platform for auditing, policy, and risk analysis.
pip-audit1.4kpip-audit scans Python environments and requirements files for dependencies with known vulnerabilities, with automatic fixes, SBOM output and CI integration.
in-toto1.1kin-toto is a framework for protecting software supply-chain integrity by verifying that each build step was performed as planned by authorized personnel.
x64dbg50.3kAn open-source user-mode debugger for Windows built for reverse engineering and malware analysis, offering disassembly, memory inspection, scripting and a rich plugin system for hands-on binary debugging.
mitmproxy46.9kAn interactive TLS-capable intercepting HTTP proxy with console, command-line, and web interfaces, used by pentesters and developers for debugging and security testing.
sniffnet42.2kA cross-platform desktop app for comfortably monitoring network traffic, with real-time charts, connection inspection, geolocation, protocol identification, notifications and PCAP import/export.