Repositories list

• Secret-Scanning-Sampler

  Public
  0•0•0•0•Updated Apr 20, 2025Apr 20, 2025

• legitify

  Public
  Detect and remediate misconfigurations and security risks across all your GitHub and GitLab assets

  githubgolangsecurity+ 7devopsgitlabcisecurity-scannerdevsecopssupply-chain-securitysdlc-security

  Go

  •

  Apache License 2.0

  •69•815•8•8•Updated Mar 28, 2025Mar 28, 2025

• wrongsecrets

  Public
  Vulnerable app with examples showing how to not use secrets

  Java

  •

  GNU Affero General Public License v3.0

  •466•0•0•0•Updated May 2, 2024May 2, 2024

• legit-score

  Public
  Go

  •1•0•0•2•Updated Dec 18, 2023Dec 18, 2023

• homebrew-core

  Public
  🍻 Default formulae for the missing package manager for macOS (or Linux)

  Ruby

  •

  BSD 2-Clause "Simplified" License

  •13k•0•0•0•Updated Nov 22, 2023Nov 22, 2023

• homebrew-legit-labs

  Public
  Brew tap for legit-labs projects

  Ruby

  •1•1•0•0•Updated Nov 21, 2023Nov 21, 2023

• action-download-artifact

  Public
  ⚙️ A GitHub Action to download an artifact associated with given workflow and commit or other criteria

  JavaScript

  •

  MIT License

  •227•5•0•6•Updated Oct 11, 2023Oct 11, 2023

• scorecard

  Public
  Security Scorecards - Security health metrics for Open Source

  Go

  •

  Apache License 2.0

  •565•0•0•48•Updated Sep 11, 2023Sep 11, 2023

• wg-best-practices-os-developers

  Public
  The Best Practices for OSS Developers working group is dedicated to raising awareness and education of secure code best practices for open source developers.

  JavaScript

  •

  Apache License 2.0

  •179•0•0•0•Updated Aug 28, 2023Aug 28, 2023

• legit-provenance-verifier

  Public
  Go

  •0•0•0•6•Updated Jul 5, 2023Jul 5, 2023

• legit-score-verifier

  Public
  Go

  •0•0•0•5•Updated May 26, 2023May 26, 2023

• legit-remote-provenance-server

  Public
  Go

  •0•0•0•5•Updated May 26, 2023May 26, 2023

• legit-verify-attestation

  Public
  Go

  •0•0•0•5•Updated May 11, 2023May 11, 2023

• legit-oidc

  Public
  Go

  •0•0•0•4•Updated May 11, 2023May 11, 2023

• legit-registry-tools

  Public
  Go

  •0•0•0•2•Updated May 11, 2023May 11, 2023

• legitify-public-action-demo

  Public
  0•0•0•0•Updated May 10, 2023May 10, 2023

• gh-legitify

  Public
  GitHub CLI extension for running "legitify"

  gh-extension

  Shell

  •0•3•1•0•Updated Mar 27, 2023Mar 27, 2023

• go-github

  Public
  Go library for accessing the GitHub v3 API

  Go

  •

  BSD 3-Clause "New" or "Revised" License

  •2.2k•0•0•0•Updated Jan 30, 2023Jan 30, 2023

• detect-workflow

  Public
  A standalone binary to execute the detect-workflow action from slsa-framework/slsa-github-generator

  0•0•0•0•Updated Dec 29, 2022Dec 29, 2022

• legit-provenance-generator

  Public
  Language-agnostic SLSA provenance generation for Github Actions

  Go

  •

  Apache License 2.0

  •156•0•0•0•Updated Dec 21, 2022Dec 21, 2022

• goreleaser

  Public
  Deliver Go binaries as fast and easily as possible

  Go

  •

  MIT License

  •1k•0•0•0•Updated Nov 14, 2022Nov 14, 2022

• goreleaser-action

  Public
  GitHub Action for GoReleaser

  TypeScript

  •

  MIT License

  •85•0•0•0•Updated Nov 13, 2022Nov 13, 2022

• legit-k8s-ac

  Public
  Legit k8s admission controller for provenance and repository-posture status

  Go

  •

  MIT License

  •102•0•0•0•Updated Nov 2, 2022Nov 2, 2022

• legit-provenance-uploader

  Public
  0•0•0•0•Updated Nov 2, 2022Nov 2, 2022

• legit-attestation-uploader

  Public
  0•0•0•0•Updated Nov 2, 2022Nov 2, 2022

• legit-provenance-action

  Public
  0•0•0•0•Updated Oct 23, 2022Oct 23, 2022

• legit-remote-provenance

  Public
  Go

  •0•0•0•0•Updated Oct 19, 2022Oct 19, 2022

• .github

  Public
  0•0•0•0•Updated May 30, 2022May 30, 2022

• tag-security

  Public archive
  🔐CNCF Security Technical Advisory Group -- secure access, policy control, privacy, auditing, explainability and more!

  Shell

  •

  Other

  •554•0•0•0•Updated Mar 13, 2022Mar 13, 2022