Level-up Container Security: 4 Open-Source Tools for Secure Software Supply Chain

• copacetic

  6 785 9.3 Go

  🧵 CLI tool for directly patching container images using reports from vulnerability scanners

  

Copacetic, another open-source gem, works in tandem with Trivy to tackle vulnerabilities in container images.

• ratify

  2 178 9.5 Go

  Artifact Ratification Framework

  

Ratify is an admission controller. It's available both as a binary and as a Kubernetes tool installed via a Helm Chart. It ensures that only signed images are deployed. It's an invaluable tool for safeguarding your AKS cluster by preventing unsigned container images from being deployed.

• WorkOS

  workos.com sponsored

  The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.

  

• secure-supply-chain-on-aks

  2 28 8.0 Shell

  Learn how to use open-source tools to secure your container deployments on Azure Kubernetes Service.

Learn how to add these tools to your existing pipelines, with this step-by-step workshop!

• notation

  7 289 8.9 Go

  A CLI tool to sign and verify artifacts (by notaryproject)

  

Notation is another command-line too that lets you digitally sign artifacts. And those signatures essentaily become the stamps of approval for the different things in your software supply chain. For example, container images.

Suggest a related project