Chainloop
A Software Supply Chain Attestation solution devs won't hate. Agentic SDLC infrastructure. Define guardrails. Collect signals. Enforce continuously. Signed records of what your AI coding agents and CI/CD pipelines did, checked against policies as code, with the loop closed in CI/CD. AI sessions, SBOMs, VEX, SARIF and SLSA provenance, built on Sigstore and in-toto. Apache 2.0. === The Problem === You work on the Security and Operations (SecOps) team in charge of your organization's Software Supply Chain Security.
오픈소스
반응 (1)
비슷한 프로덕트
설명이 비슷한 순
Conduct
github.comopen-source guardrails for LLM and MCP tool calls
Free local security checks for AI coding in VSCode
news.ycombinator.comCursor and Windsurf
SmokedMeat
github.comlike Metasploit, but for CI/CD (open-source)
AISlop
github.coma CLI for catching AI generated code smells
Forge
github.comGuardrails take an 8B model from 53% to 99% on agentic tasks