Projects by Tag — Supply-Chain-Security: Verified SBOM, SLSA, Sigstore & Secure Build Pipeline Implementations
Explore projects tagged with supply-chain-security to discover concrete implementations of SBOM generation and verification, SLSA-compliant build pipelines, Sigstore artifact signing, provenance attestation, reproducible builds, and automated dependency scanning. This projects-by-tags view surfaces open-source and commercial projects that embed supply chain security controls across languages and ecosystems, with filterable metadata such as maturity, ecosystem, chain, license, and CI/CD integrations. Use the filters to narrow results by technology, risk mitigations, or integration patterns, review implementation details and recommended best practices, and take action to adopt, integrate, or contribute to solutions that harden software supply chains.
