DHI definition files and catalog metadata

agent runtime security - zero trust, zero setup, zero latency agent sandbox

AI skill for securing software dependencies

in-toto is a framework to secure the software supply chain.

Pure Go CLI tool to let agents rip safely

Friends of in-toto! A place to record integrations and adoptions of the in-toto specification.

Command line interface for Kusari

A specification for signing methods and formats used by Secure Systems Lab projects.

ORBIT: Open Resources for Baselines, Interoperability, and Tooling

Erlang Shell

A virtual monitor for screen sharing

Graphing SBOM's Fast.

Format agnostic SBOM tooling

Storage backends for protobom

A universal SBOM representation in protocol buffers

krata is a Xen control plane in Rust.

Integrate OPA Gatekeeper's new ExternalData feature with witness to determine whether the images are valid by verifying them against a witness policy

The Update Framework specification

Community Repository of The Update Framework (TUF)

TUF Augmentation Proposals (TAPs)

in-toto Enhancements

OpenSSF Scorecard - Security health metrics for Open Source

Cryptographic and general-purpose routines for Golang Secure Systems Lab projects at NYU

OpenSSF Education SIG