Atomdrift Scan detects malware in files, packages and archives using static analysis, rules, hashes and machine learning.
Read more
Tag: supply chain
in-toto – framework for software supply chain integrity
in-toto protects software supply chains by recording signed metadata for each step and checking the result against a defined layout.
Read more
cosign – sign and verify software artifacts with Sigstore
cosign signs and verifies containers, binaries and other software artifacts using Sigstore, keys, identities and transparency logs.
Read more