Repositories list

• archivista-data-provider

  Public
  Integrate OPA Gatekeeper's new ExternalData feature with witness to determine whether the images are valid by verifying them against a witness policy

  Go

  •

  Apache License 2.0

  •1•4•3•2•Updated Feb 10, 2025Feb 10, 2025

• witness-enterprise-demo

  Public
  0•0•0•0•Updated Jan 29, 2025Jan 29, 2025

• witness-run-action

  Public
  JavaScript

  •

  Apache License 2.0

  •3•8•2•2•Updated Jan 21, 2025Jan 21, 2025

• swf

  Public
  Makefile

  •

  Apache License 2.0

  •5•7•1•6•Updated Feb 7, 2025Feb 7, 2025

• witness-webhook

  Public
  Go

  •

  Apache License 2.0

  •1•4•0•0•Updated Dec 9, 2024Dec 9, 2024

• rt-poisened-cache

  Public
  Shows attack and mitigation using witness for GH poisoned cache attacks

  Python

  •1•0•0•0•Updated Dec 9, 2024Dec 9, 2024

• demo-repo

  Public template
  A demo repo to show onboarding to JUDGE

  Dockerfile

  •0•0•0•1•Updated Oct 18, 2024Oct 18, 2024

• demo0002

  Public
  Dockerfile

  •0•0•0•0•Updated Jul 18, 2024Jul 18, 2024

• demo0001

  Public
  Dockerfile

  •0•0•0•1•Updated Jul 13, 2024Jul 13, 2024

• omnitrail-go

  Public
  Go

  •

  Apache License 2.0

  •1•3•0•0•Updated Jul 9, 2024Jul 9, 2024

• charts

  Public
  Smarty

  •

  Apache License 2.0

  •3•3•1•1•Updated Apr 10, 2024Apr 10, 2024

• solarsploit

  Public
  Red team tool that emulates the SolarWinds CI compromise attack vector.

  securitysecurity-toolssupply-chain-security+ 1compiler

  Go

  •

  MIT License

  •4•22•0•0•Updated Mar 15, 2024Mar 15, 2024

• witness-examples

  Public
  Witness Examples

  Shell

  •3•10•5•0•Updated Feb 27, 2024Feb 27, 2024

• library

  Public
  Go

  •0•0•0•0•Updated Feb 10, 2024Feb 10, 2024

• gitlab-runner

  Public
  Go

  •

  MIT License

  •0•0•0•1•Updated Jan 26, 2024Jan 26, 2024

• technical-assessments

  Public
  This is a repository for technical assessments that can be used screening purposes.

  MIT License

  •0•1•0•0•Updated Oct 9, 2023Oct 9, 2023

• go-ima

  Public
  go-ima is a tool that checks if a file has been tampered with. It is useful in ensuring integrity in CI systems

  Go

  •

  MIT License

  •3•13•0•0•Updated Sep 28, 2023Sep 28, 2023

• community

  Public
  Witness and Archivista community information

  Apache License 2.0

  •0•3•0•0•Updated Sep 7, 2023Sep 7, 2023

• witness-website

  Public
  HTML

  •

  Apache License 2.0

  •0•0•1•1•Updated Dec 6, 2023Dec 6, 2023

• testify-run-action

  Public
  JavaScript

  •0•1•4•0•Updated Nov 4, 2022Nov 4, 2022

• witness-bpf-demo

  Public
  Shell

  •0•3•0•0•Updated Oct 26, 2022Oct 26, 2022

• witness-install-action

  Public
  JavaScript

  •

  Apache License 2.0

  •1•3•2•0•Updated Oct 18, 2022Oct 18, 2022

• registrar-api

  Public
  API Definitions for Registrar

  TypeScript

  •

  MIT License

  •0•0•0•0•Updated Oct 13, 2022Oct 13, 2022

• judge-k8s

  Public
  Proof of concept Kubernetes admission controller using the witness attestation verification library

  Go

  •

  Apache License 2.0

  •1•1•0•0•Updated Feb 11, 2022Feb 11, 2022