Pinned Loading

1. omega omega Public

   SPIFFE-compatible workload identity + OpenID AuthZEN 1.0 authorization in a single Apache-2.0 binary. Cedar PDP, SPIFFE federation, tamper-evident audit log, Kubernetes operator.

   Go 1

2. zopa zopa Public

   Policy engine for proxy-wasm. ~60 KB wasm, written in Zig.

   Zig

3. awscape awscape Public

   Escape AWS bills. A 30-minute hands-on that builds S3 → Lambda → DynamoDB inside the AWS Always Free tier. EN/JA.

   Shell

4. chainscope chainscope Public

   A visual explainer for software supply chain security: six stages, six real attacks, six defenses.

   Astro

5. sigil sigil Public

   secure-by-default github template for oss: signed commits, sha-pinned actions, slsa v1.0 provenance, sigstore keyless signing, npm oidc publishing.

   Shell

6. hello-slsa hello-slsa Public

   Minimal end-to-end demo of SLSA Build L3 provenance: a 12-line Go binary that signs its own provenance on every tag, plus a verifier walkthrough.

   Shell