Skip to content
#

software-factory

Here are 208 public repositories matching this topic...

Agentic SDLC infrastructure. Define guardrails. Collect signals. Enforce continuously. Signed records of what your AI coding agents and CI/CD pipelines did, checked against policies as code, with the loop closed in CI/CD. AI sessions, SBOMs, VEX, SARIF and SLSA provenance, built on Sigstore and in-toto. Apache 2.0.

  • Updated Oct 15, 2026
  • Go

Add this topic to your repo

To associate your repository with the software-factory topic, visit your repo's landing page and select "manage topics."

Learn more