Why this repo matters
Latest release 0d ago, 4 developer signals, 1 package/install signals
Agentic SDLC infrastructure. Define guardrails. Collect signals. Enforce continuously. Signed records of what your AI coding agents and CI/CD pipelines did, checked against policies as code, with the loop closed in CI/CD. AI sessions, SBOMs, VEX, SARIF and SLSA provenance, built on Sigstore and in-toto. Apache 2.0. (609 stars, 63 forks, Go, fresh release, 4 AI signals, 3 developer signals). Latest release: v1.132.0.
Repo analysis