Root-signing Alternatives
Similar projects and alternatives to root-signing
-
packj
Packj stops :zap: Solarwinds-, ESLint-, and PyTorch-like attacks by flagging malicious/vulnerable open-source dependencies ("weak links") in your software supply-chain
-
InfluxDB
Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.
root-signing reviews and mentions
-
NPM Provenance Public Beta
caveat, I am from the sigstore project.
GitLab are currently working with sigstore community to rig in their CI/CD as well and the root of CA of sigstore is community created and owned. This means any provider can trade an ODIC ID token for a sigstore certificate.
https://github.com/sigstore/root-signing
Stats
sigstore/root-signing is an open source project licensed under Apache License 2.0 which is an OSI approved license.
The primary programming language of root-signing is Go.
Popular Comparisons
Sponsored