S

supply-chain

OpenVet Registry, hosted at https://openvet.org.

Verified tool registry manager. Manages developer toolchains from git-based registries.

Verified tool registry for kit. Pinned versions, checksums, cosign signatures.

Unified compliance matrix for shipping software into regulated sectors. DoD, HIPAA, Finance, Education. Rust audit CLI.

CI/CD catalog components for regulated container builds. Standardizes buildah, cosign signing, verification, and release across public-sector-tools projects. Consumed via GitLab CI component includes.

[Reference tool] Analyze SBOM dependency graph complexity to predict BuildDependencyGraphWorker performance. CycloneDX and SPDX 2.3. No compiled artifact.

Defanged malware stages from the telnyx 4.87.1/4.87.2 PyPI supply chain compromise

Defanged malware stages from the litellm 1.82.8 PyPI supply chain compromise

Demo vulnerability NodeJS Yarn project for GitLab Package Hunter