gittuf
wasm-to-oci
| gittuf | wasm-to-oci | |
|---|---|---|
| 2 | 2 | |
| 397 | 239 | |
| 21.2% | 2.1% | |
| 9.6 | 0.0 | |
| 7 days ago | over 1 year ago | |
| Go | Go | |
| Apache License 2.0 | Apache License 2.0 |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
gittuf
-
Git Branches: Intuition and Reality
It actually does but it's very much in alpha/active development (under the umbrella of OpenSSF with the intent of being integrated into mainline git eventually).
https://github.com/gittuf/gittuf
-
Gittuf – a security layer for Git using some concepts introduced by TUF
Hey Will, thanks!
The paper is from quite a few years ago now and the reference is for a subset of gittuf's threat model, specifically the metadata manipulation / reference state attacks. The paper talks about MITM as one way to carry out a ref state attack, but if you're communicating with a compromised repository, you can be a victim of such an attack even if you're using authenticated transport and using signed commits / tags that you have a way of verifying.
We do have a threat model for gittuf that we've been meaning to add [0] to the design doc. I'll try and get that done today. It should probably be in there before we tag our alpha release. :)
[0] https://github.com/gittuf/gittuf/issues/95
wasm-to-oci
-
Containerless! How to Run WebAssembly Workloads on Kubernetes with Rust
# Install for Linux curl -LO https://github.com/engineerd/wasm-to-oci/releases/download/v0.1.2/linux-amd64-wasm-to-oci # move to any location that is added to your PATH variable mv linux-amd64-wasm-to-oci ~/bin/wasm-to-oci
-
Running AssemblyScript in Kubernetes with Krustlet
Next we need to get Wasm-to-OCI which is a tool that will convert the WASM module to an OCI container. You can download it here: https://github.com/engineerd/wasm-to-oci/releases. You can use wget on the link address to the one you want.
What are some alternatives?
gitsign - Keyless Git signing using Sigstore
wagi - Write HTTP handlers in WebAssembly with a minimal amount of work
attestation - in-toto Attestation Framework
wasi-experimental-http - Experimental outbound HTTP support for WebAssembly and WASI
build-extra - Additional files and scripts to help build Git for Windows on MSYS2.
hackpad - The in-browser IDE for Go
git-secret - :busts_in_silhouette: A bash-tool to store your private data inside a git repository.
Pion WebRTC - Pure Go implementation of the WebRTC API
go-tuf - Go implementation of The Update Framework (TUF)
okta-rust-webassembly-k8s-example - An example Rust WebAssembly application as a Kubernetes workload
example
TinyGo - Go compiler for small places. Microcontrollers, WebAssembly (WASM/WASI), and command-line tools. Based on LLVM.