Other / unclassified
slsa
slsa-framework/slsa
SLSA is a supply-chain security specification and maturity framework; this repository hosts the specification text, released versions and the slsa.dev website sources rather than runnable software.
Topics
Related projects
sops23.7kAn editor of encrypted files that supports YAML, JSON, ENV, and binary formats, using cloud KMS, age, or PGP keys to manage secrets safely.
DevSecOps6.9kThe Ultimate DevSecOps library is a curated awesome-list that organizes open-source security tools and methodologies by topic such as SAST, DAST, supply chain, and Kubernetes.
faraday6.8kFaraday is an open-source vulnerability management platform that aggregates and normalizes results from many scanners, adding multiuser collaboration, visualization, and reporting.
nono4.8kA zero-setup sandbox for AI agents that enforces least-privilege filesystem, network and credential policies per profile.
inspec3.1kChef InSpec is an infrastructure auditing and testing framework with a human-readable Ruby DSL for expressing compliance, security and policy requirements, runnable against local, remote, container and cloud targets.
tirith2.8kTirith is a terminal security gate for developers and AI agents. It blocks homograph URLs, pipe-to-shell, ANSI injection, data exfiltration and malicious skills before execution, adding shell hooks, an MCP gateway and sandboxed runs.