Repositories list

• homebrew-legit-labs

  Public
  Brew tap for legit-labs projects

  Ruby

  •11 fork•11 star•00 issues•00 pull requests•Updated Apr 16, 2026Apr 16, 2026

• supply-chain-playbooks

  Public
  00 forks•11 star•00 issues•00 pull requests•Updated Apr 5, 2026Apr 5, 2026

• trivy-remediation-playbooks

  Public
  00 forks•55 stars•00 issues•00 pull requests•Updated Mar 26, 2026Mar 26, 2026

• claude-marketplace

  Public
  Shell

  •00 forks•00 stars•00 issues•00 pull requests•Updated Mar 12, 2026Mar 12, 2026

• Secret-Scanning-Sampler

  Public
  00 forks•00 stars•00 issues•00 pull requests•Updated Apr 20, 2025Apr 20, 2025

• legitify

  Public
  Detect and remediate misconfigurations and security risks across all your GitHub and GitLab assets

  githubgolangsecurity+ 7

  githubgolangsecuritydevopsgitlabcisecurity-scannerdevsecopssupply-chain-securitysdlc-security

  Go

  •

  Apache License 2.0

  •7676 forks•856856 stars•88 issues•88 pull requests•Updated Mar 28, 2025Mar 28, 2025

• wrongsecrets

  Public
  Vulnerable app with examples showing how to not use secrets

  Java

  •

  GNU Affero General Public License v3.0

  •549549 forks•00 stars•00 issues•00 pull requests•Updated May 2, 2024May 2, 2024

• legit-score

  Public
  Go

  •11 fork•00 stars•00 issues•22 pull requests•Updated Dec 18, 2023Dec 18, 2023

• homebrew-core

  Public
  🍻 Default formulae for the missing package manager for macOS (or Linux)

  Ruby

  •

  BSD 2-Clause "Simplified" License

  •13k13k forks•00 stars•00 issues•00 pull requests•Updated Nov 22, 2023Nov 22, 2023

• action-download-artifact

  Public
  :gear: A GitHub Action to download an artifact associated with given workflow and commit or other criteria

  JavaScript

  •

  MIT License

  •234234 forks•55 stars•00 issues•66 pull requests•Updated Oct 11, 2023Oct 11, 2023

• scorecard

  Public
  Security Scorecards - Security health metrics for Open Source

  Go

  •

  Apache License 2.0

  •627627 forks•00 stars•00 issues•4848 pull requests•Updated Sep 11, 2023Sep 11, 2023

• wg-best-practices-os-developers

  Public
  The Best Practices for OSS Developers working group is dedicated to raising awareness and education of secure code best practices for open source developers.

  JavaScript

  •

  Apache License 2.0

  •192192 forks•00 stars•00 issues•00 pull requests•Updated Aug 28, 2023Aug 28, 2023

• legit-provenance-verifier

  Public
  Go

  •00 forks•00 stars•00 issues•66 pull requests•Updated Jul 5, 2023Jul 5, 2023

• legit-score-verifier

  Public
  Go

  •00 forks•00 stars•00 issues•55 pull requests•Updated May 26, 2023May 26, 2023

• legit-remote-provenance-server

  Public
  Go

  •00 forks•00 stars•00 issues•55 pull requests•Updated May 26, 2023May 26, 2023

• legit-verify-attestation

  Public
  Go

  •00 forks•00 stars•00 issues•55 pull requests•Updated May 11, 2023May 11, 2023

• legit-oidc

  Public
  Go

  •00 forks•00 stars•00 issues•44 pull requests•Updated May 11, 2023May 11, 2023

• legit-registry-tools

  Public
  Go

  •00 forks•00 stars•00 issues•22 pull requests•Updated May 11, 2023May 11, 2023

• legitify-public-action-demo

  Public
  00 forks•00 stars•00 issues•00 pull requests•Updated May 10, 2023May 10, 2023

• gh-legitify

  Public
  GitHub CLI extension for running "legitify"

  gh-extension

  gh-extension

  Shell

  •00 forks•22 stars•11 issue•00 pull requests•Updated Mar 27, 2023Mar 27, 2023

• go-github

  Public
  Go library for accessing the GitHub v3 API

  Go

  •

  BSD 3-Clause "New" or "Revised" License

  •2.2k2.2k forks•00 stars•00 issues•00 pull requests•Updated Jan 30, 2023Jan 30, 2023

• detect-workflow

  Public
  A standalone binary to execute the detect-workflow action from slsa-framework/slsa-github-generator

  00 forks•00 stars•00 issues•00 pull requests•Updated Dec 29, 2022Dec 29, 2022

• legit-provenance-generator

  Public
  Language-agnostic SLSA provenance generation for Github Actions

  Go

  •

  Apache License 2.0

  •180180 forks•00 stars•00 issues•00 pull requests•Updated Dec 21, 2022Dec 21, 2022

• goreleaser

  Public
  Deliver Go binaries as fast and easily as possible

  Go

  •

  MIT License

  •1.1k1.1k forks•00 stars•00 issues•00 pull requests•Updated Nov 14, 2022Nov 14, 2022

• goreleaser-action

  Public
  GitHub Action for GoReleaser

  TypeScript

  •

  MIT License

  •9898 forks•00 stars•00 issues•00 pull requests•Updated Nov 13, 2022Nov 13, 2022

• legit-k8s-ac

  Public
  Legit k8s admission controller for provenance and repository-posture status

  Go

  •

  MIT License

  •102102 forks•00 stars•00 issues•00 pull requests•Updated Nov 2, 2022Nov 2, 2022

• legit-provenance-uploader

  Public
  00 forks•00 stars•00 issues•00 pull requests•Updated Nov 2, 2022Nov 2, 2022

• legit-attestation-uploader

  Public
  00 forks•00 stars•00 issues•00 pull requests•Updated Nov 2, 2022Nov 2, 2022

• legit-provenance-action

  Public
  00 forks•00 stars•00 issues•00 pull requests•Updated Oct 23, 2022Oct 23, 2022

• legit-remote-provenance

  Public
  Go

  •00 forks•00 stars•00 issues•00 pull requests•Updated Oct 19, 2022Oct 19, 2022