Open source repositories tagged with #supply-chain, ranked by health score.
Official GitHub Action for OpenSSF Scorecard.
🏆Open Source Security Foundation (OpenSSF) Best Practices Badge (formerly Core Infrastructure Initiative (CII) Best Practices Badge)
Trusted builds made easy! A cloud-native software factory for building, testing, and releasing trusted software artifacts
Creates CycloneDX Bill of Materials (BOM) for your projects from source and container images. Supports many languages and package managers. Integrate in your CI/CD pipeline with automatic submission to Dependency Track server
