An open API service providing package, version and dependency metadata of many open source software ecosystems and registries.

formulae.brew.sh "supply-chain" keyword

sigstore 4.5.1
Codesigning tool for Python packages
25 versions - Latest release: 6 days ago - 64 downloads last month - 336 stars on GitHub
otterdog 1.6.1
Manage GitHub organizations at scale using an infrastructure as code approach
10 versions - Latest release: 11 days ago - 19 downloads last month - 55 stars on GitHub
frizbee 0.1.11
Throw a tag at and it comes back with a checksum
11 versions - Latest release: about 2 months ago - 5 downloads last month - 186 stars on GitHub
minder 0.3.2
CLI for interacting with Stacklok's Minder platform
61 versions - Latest release: about 1 month ago - 5 downloads last month - 424 stars on GitHub
witness 0.12.0
Automates, normalizes, and verifies software artifact provenance
17 versions - Latest release: 3 months ago - 5 downloads last month - 552 stars on GitHub
vexctl 0.4.4
Tool to create, transform and attest VEX metadata
5 versions - Latest release: 4 months ago - 10 downloads last month - 218 stars on GitHub
poutine 1.1.6
Security scanner that detects vulnerabilities in build pipelines
20 versions - Latest release: 5 months ago - 13 downloads last month - 527 stars on GitHub
bomber 0.5.1 💰
Scans Software Bill of Materials for security vulnerabilities
5 versions - Latest release: about 2 years ago - 11 downloads last month - 626 stars on GitHub
bagel 0.7.1
CLI to audit posture and evaluate compromise blast radius
6 versions - Latest release: 3 months ago - 6 downloads last month - 200 stars on GitHub
cdxgen 12.8.4 💰
Creates CycloneDX Software Bill-of-Materials (SBOM) for projects
115 versions - Latest release: 2 months ago - 604 downloads last month - 1,076 stars on GitHub