Build Container Images In Kubernetes

A security layer for Git repositories

HTTP Round Tripper for GitHub Apps - Authenticate as an Installation Workflow

A GitHub App that acts like a Security Token Service (STS) for the Github API

A GitHub action to create a pull request for changes to your repository in the actions workspace

Command-line sampling profiler for macOS, Linux, and Windows

Context aware slog

A tool to create, transform and attest VEX metadata

Assemble multiple CODEOWNERS file into one.

A utility to generate SPDX-compliant Bill of Materials manifests

Virtual whiteboard for sketching hand-drawn like diagrams

Public Chainguard Images

Supply Chain Security in Tekton Pipelines

A cloud-native Pipeline resource.

Build and deploy Go applications

A tool for printing X509 TLS certificates in Go

Code-signing for npm packages

A tool for securing CI/CD workflows with version pinning.

Keyless Git signing using Sigstore

Code signing and transparency for containers and binaries

Build OCI images from APK packages directly without Dockerfile

Because sometimes you need to do it live

Kubernetes IN Docker - local clusters for testing Kubernetes

Long term storage of execution results.

A CLI tool for firing a collection of known webhooks

Package scm provides a unified interface to multiple source code management systems.

Interactive Knative Brokers/Tekton Triggers learning environment

A lightweight tool to report on the licenses used by a Go package and its dependencies. Highlight! Versioned external URL to licenses can be found at the same time.