Action for generating SBOM attestations for workflow artifacts

Action for generating attestations for workflow artifacts

Details on npm provenance

Community artifact repository workflow experiments

in-toto Attestation Framework

A powerful little TUI framework 🏗

Run your GitHub Actions locally 🚀

An automated TUF repository demo

JavaScript implementation of The Update Framework (TUF)

An open source trusted cloud native registry project that stores, signs, and scans content.

Code-signing for npm packages