Skip to content

@carabiner-dev Carabiner Systems

Change the repository type filter

All

    Repositories list

    60 repositories

    • osv

      Public
      Tools, libraries and protocol buffer definitions to work with the Open Source Vulnerabilities format (OSV).
      vulnerabilitiesosvosv-schema
      vulnerabilitiesosvosv-schema
      Go
      •
      Apache License 2.0
      •1•2•0•1•Updated Aug 14, 2026Aug 14, 2026

    • stash

      Public
      Client and library for attestation storage
      Go
      •
      Apache License 2.0
      •0•0•0•1•Updated Aug 14, 2026Aug 14, 2026

    • lexecutor

      Public
      Test harness for policy testing at scale
      Go
      •
      Apache License 2.0
      •0•0•0•1•Updated Aug 14, 2026Aug 14, 2026

    • burnafter

      Public
      A more secure way to store credentials for CLI programs.
      Go
      •
      Apache License 2.0
      •2•1•0•1•Updated Aug 14, 2026Aug 14, 2026

    • pinpoint

      Public
      Go
      •
      Apache License 2.0
      •0•0•0•1•Updated Aug 14, 2026Aug 14, 2026

    • bnd

      Public
      Sign and package attestations in sigstore bundles
      signaturessignature-verificationattestation
      signaturessignature-verificationattestationattestationsslsasigstoreslsa-provenanceintoto
      Go
      •
      Apache License 2.0
      •3•10•1•1•Updated Aug 14, 2026Aug 14, 2026

    • signer-extras

      Public
      Extra plugins and add-ons for the carabiner signer
      Go
      •
      Apache License 2.0
      •0•0•0•1•Updated Aug 14, 2026Aug 14, 2026

    • ll

      Public
      The carabiner Lamplight service client
      Go
      •
      Apache License 2.0
      •0•0•0•1•Updated Aug 13, 2026Aug 13, 2026

    • predicates

      Public
      Wrappers around 🔴🟡🟢 AMPEL policy material elements to implement the carabiner attestation framework
      Go
      •
      Apache License 2.0
      •0•0•0•1•Updated Aug 13, 2026Aug 13, 2026

    • deadrop

      Public
      A CLI utility to interact with Carabiner's Deadrop token exchanger
      Go
      •
      Apache License 2.0
      •0•0•0•1•Updated Aug 13, 2026Aug 13, 2026

    • unpack

      Public
      A collection of dependency analysis libraries
      Go
      •
      Apache License 2.0
      •2•2•1•2•Updated Aug 13, 2026Aug 13, 2026

    • ampel

      Public
      🔴🟡🟢 The Amazing Multipurpose Policy Engine (and L)
      supply-chainactionspolicy
      supply-chainactionspolicyattestationcelattestationssupply-chain-securitysigstoreintoto
      Go
      •
      Apache License 2.0
      •15•54•4•0•Updated Aug 13, 2026Aug 13, 2026

    • actions

      Public
      GiitHub actions for various tools in the Carabiner ecosystems
      Shell
      •
      Apache License 2.0
      •5•1•4•0•Updated Aug 13, 2026Aug 13, 2026

    • homebrew-tap

      Public
      Hombrew Tap for the carabiner tools
      Ruby
      •
      Creative Commons Zero v1.0 Universal
      •1•1•0•0•Updated Aug 13, 2026Aug 13, 2026

    • policy

      Public
      AMPEL Policy Framework
      Go
      •
      Apache License 2.0
      •2•1•6•0•Updated Aug 12, 2026Aug 12, 2026

    • drop

      Public
      A secure-first installer for GitHub releases.
      Go
      •
      Apache License 2.0
      •2•2•3•0•Updated Aug 12, 2026Aug 12, 2026

    • snappy

      Public
      An easy API snapshot tool.
      apirestrest-api
      apirestrest-apiattestationssigstore
      Go
      •
      Apache License 2.0
      •3•6•0•0•Updated Aug 12, 2026Aug 12, 2026

    • yamplate

      Public
      A YAML parser with templating capabilities
      Go
      •
      Apache License 2.0
      •1•0•0•0•Updated Aug 12, 2026Aug 12, 2026

    • command

      Public
      Reusable options for cobra-based command line apps
      Go
      •
      Apache License 2.0
      •0•0•0•0•Updated Aug 11, 2026Aug 11, 2026

    • collector

      Public
      Attestation collector and parsers
      Go
      •
      Apache License 2.0
      •3•1•3•0•Updated Aug 11, 2026Aug 11, 2026

    • policyctl

      Public
      A tool to manage ampel policies
      Go
      •
      Apache License 2.0
      •0•0•2•0•Updated Aug 11, 2026Aug 11, 2026

    • signer

      Public
      Easy digital signing library with support for sigstore and key pairs.
      Go
      •
      Apache License 2.0
      •3•0•0•0•Updated Aug 10, 2026Aug 10, 2026

    • spdx3

      Public
      SPDX v3.0.x parser and serializer library
      licensingsecurityai
      licensingsecurityaigraphvexspdxjsonldjsonld-contextsbomaibom
      Go
      •
      Apache License 2.0
      •0•0•0•0•Updated Aug 8, 2026Aug 8, 2026

    • vcslocator

      Public
      Tiny library to handle SPDX VCS locator URIs
      Go
      •
      Apache License 2.0
      •2•1•0•0•Updated Aug 3, 2026Aug 3, 2026

    • github

      Public
      Super simple GitHub API client.
      Go
      •
      Apache License 2.0
      •0•1•0•0•Updated Aug 3, 2026Aug 3, 2026

    • vexflow

      Public
      A tool and framework to manage a vulnerability's assessment lifecycle through VEX.
      Go
      •
      Apache License 2.0
      •2•8•8•1•Updated Aug 3, 2026Aug 3, 2026

    • beaker

      Public
      Normalize and attest test results
      Go
      •
      Apache License 2.0
      •1•0•0•0•Updated Aug 3, 2026Aug 3, 2026

    • openeox

      Public
      OpenEOX utilities and data types
      Go
      •
      Apache License 2.0
      •0•0•0•0•Updated Aug 3, 2026Aug 3, 2026

    • hasher

      Public
      A simple go module to hash files
      Go
      •
      Apache License 2.0
      •0•0•1•0•Updated Aug 3, 2026Aug 3, 2026

    • sbomfs

      Public
      A filesystem implementation that reads and writes data from Software Bills of Materials (SBOMs)
      Go
      •
      Apache License 2.0
      •0•0•0•0•Updated Jul 31, 2026Jul 31, 2026
    ProTip! When viewing an organization's repositories, you can use the props. filter to filter by custom property.