provenance

🔎 ScanCode detects licenses, copyrights, dependencies by "scanning code" ... to discover and inventory open source and third-party packages used in your code. Sponsored by NLnet project https://nlnet.nl/project/vulnerabilitydatabase, the Google Summer of Code, Azure credits, nexB and others generous sponsors!

A suite of tools to assist with reviewing Open Source Software dependencies.

Software Supply Chain Transparency Log

Effortless method to record provenance in Python

An admission controller that integrates Container Image Signature Verification into a Kubernetes cluster

The official repository for the AiiDA code

Blue Brain Nexus - A knowledge graph for data-driven science

An open-source, vendor-neutral data context service.

Log shell-commands and used files. Snapshot executed scripts. Fully automatic.

A Python library for W3C Provenance Data Model (PROV)

VisTrails is an open-source data analysis and visualization tool. It provides a comprehensive provenance infrastructure that maintains detailed history information about the steps followed and data derived in the course of an exploratory task: VisTrails maintains provenance of data products, of the computational processes that derive these produ…

Java library to create and convert W3C PROV data model representations

A set of documents addressing the structure of and supporting services for xAPI Profiles.

Ontology for representing scientific evidence and provenance information

A highly configurable build executor and observer designed to generate signed SLSA provenance attestations about build runs.

Github Action implementation of SLSA Provenance Generation

Container image provenance spec that allows tracing CVEs detected in registry images back to a CVE's source of origin.

Template Go app repo with local test/lint/build/vulnerability check workflow, and on tag image test/build/release pipelines, with ko generative SBOM, cosign attestation, and SLSA build provenance

Open schemas for F.A.I.R. neuroscience data