sigstore/cosign
Container Signing, Verification and Storage in an OCI registry.
A full, open source zero trust overlay network. Including numerous SDKs for numerous languages such as golang allowing you to embed zero trust principles directly into your applications. The OpenZiti Test Kitchen has numerous examples to draw inspiration from including a zero trust ssh client - zssh
github.com/openziti/ziti/v2Go 1.27+ 102 dependenciesv2.0.8updated today
Spireby spiffe
SPIRE (the SPIFFE Runtime Environment) is a toolchain of APIs for establishing trust between software systems across a wide variety of hosting platforms.
github.com/spiffe/spireGo 1.27+ 103 dependenciesv1.15.5updated today
Go implementation of the in-toto (provides a framework to protect the integrity of the software supply chain) python reference implementation.
github.com/in-toto/in-toto-golangGo 1.24+ 9 dependenciesv0.11.0updated 1mo ago
Spiffe-Vaultby philips-labs
Utilizes Spiffe JWT authentication with Hashicorp Vault for secretless authentication.
github.com/philips-labs/spiffe-vaultGo 1.27+ 5 dependenciesv0.6.2updated 1d ago