-
Please consider adding [SLSA provenance](https://slsa.dev/) to your releases, e.g. via [GitHub Artifact attestations](https://github.blog/changelog/2024-06-25-artifact-attestations-is-generally-availa…
-
The Trusted Repository Security Initiative Task Force was created from roundtables at the Secure OSS Policy Summit in Washington D.C. in Sept. 2023 and would like to work as a SIG within the Supply Ch…
-
Hello, I'm working on behalf of Google and the [OpenSSF][ossf] to improve the supply-chain security of essential open-source projects. The OpenSSF is a non-profit foundation dedicated to improving the…
-
https://github.com/sigstore/cosign
Supply Chain Security on Amazon Elastic Kubernetes Service (Amazon EKS) using AWS Key Management Service (AWS KMS), Kyverno, and Cosign
https://aws.amazon.com/bl…
-
Been listening to a [Software Supply Chain Security talk](https://www.youtube.com/watch?v=V3SrFyMxmq4&ab_channel=CloudNativeRejekts). It might be a nice to have now - but i think sooner or later we'll…
-
**User Story**
As a cluster operator, i want to know the list of dependencies Cluster API brings for assurance within our organisation's software supply chain.
**Detailed Description**
* Cr…
-
### **Name of the Project**
VeChain (VET)/ Waltonchain(WTC)/ OriginTrail(TRAC)
**Project type**
Library
**Site of the project**
https://vechain.org/ / waltonchain.org / origint…
-
### What would you like to be added?
Hi, I'm Harshita. I’m working with [CNCF and the Google Open Source Security Team for the GSoC 2024 term](https://github.com/cncf/mentoring/issues/1196). We are…
-
As software supply chain is such important and critial, we need to enable SLSA in our Kubebb(especially kubebb/core).
https://slsa.dev/
![image](https://github.com/kubebb/core/assets/30621793/e…
-
Hi, I'm Harshita. I’m working with [CNCF and the Google Open Source Security Team for the GSoC 2024 term](https://github.com/cncf/mentoring/issues/1196). We are collaborating to enhance security pract…