composer-attest

Composer plugin that verifies GitHub build-provenance attestations for the packages you install (by k2gl)
Review Attestation composer-plugin provenance Security sigstore supply-chain
Source Code
Suggest alternative
Edit details
SaaSHub - Software Alternatives and Reviews
SaaSHub helps you find the best software and product alternatives
www.saashub.com
featured

Composer-attest Alternatives

Similar projects and alternatives to composer-attest based on common topics and language

k2gl
composer-attest

  1. composer-attest-action

    1 composer-attest VS composer-attest-action

    GitHub Action that attests your Composer package — tarball and the dist zipball Composer installs

  2. SaaSHub

    SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives

    SaaSHub logo

  3. sigstore-verify

    1 composer-attest VS sigstore-verify

    Offline Sigstore bundle verifier for PHP.

  4. connaisseur

    4 composer-attest VS connaisseur

    An admission controller that integrates Container Image Signature Verification into a Kubernetes cluster

  5. model-transparency

    2 composer-attest VS model-transparency

    Supply chain security for ML

  6. witness

    7 composer-attest VS witness

    Witness is a pluggable framework for software supply chain risk management. It automates, normalizes, and verifies software artifact provenance.

  7. SessionAttested

    2 composer-attest VS SessionAttested

    A policy-based development-session attestation framework for host-side eBPF auditing, commit binding, and signed verification.

  8. rekor

    35 composer-attest VS rekor

    Software Supply Chain Transparency Log

NOTE: The number of mentions on this list indicates mentions on common posts plus user suggested alternatives. Hence, a higher number means a better composer-attest alternative or higher similarity.
Suggest an alternative to composer-attest

composer-attest discussion

Log in or Post with

composer-attest reviews and mentions

Posts with mentions or reviews of composer-attest. We have used some of these posts to build our list of alternatives and similar projects. The last one was on 2026-07-05.

Stats

Basic composer-attest repo stats
1
0
3.1
6 days ago

k2gl/composer-attest is an open source project licensed under MIT License which is an OSI approved license.

The primary programming language of composer-attest is PHP.


Sponsored
SaaSHub - Software Alternatives and Reviews
SaaSHub helps you find the best software and product alternatives
www.saashub.com

Did you know that PHP is
the 14th most popular programming language
based on number of references?

Loading...