Go-lang Zero Trust

Back

1. Cosign

Container Signing, Verification and Storage in an OCI registry.

2. in-toto

Go implementation of the in-toto (provides a framework to protect the integrity of the software supply chain) python reference implementation.

3. Spiffe-Vault

Utilizes Spiffe JWT authentication with Hashicorp Vault for secretless authentication.

4. Spire

SPIRE (the SPIFFE Runtime Environment) is a toolchain of APIs for establishing trust between software systems across a wide variety of hosting platforms.