Learn and Practice the Rust programming language the effective way.

Supply chain security for ML

Macaron is an extensible supply-chain security analysis framework from Oracle Labs that supports a wide range of build systems and CI/CD services. It can be used to prevent supply chain attacks, de…

Verify provenance from SLSA compliant builders

Vulnerability scanner written in Go which uses the data provided by https://osv.dev

The SBOM tool is a highly scalable and enterprise ready tool to create SPDX 2.2 compatible SBOMs for any variety of artifacts.

Run your GitHub Actions locally 🚀

Language-agnostic SLSA provenance generation for Github Actions

OpenSSF Scorecard - Security health metrics for Open Source

Official GitHub Action for OpenSSF Scorecard.