:mag: ScanCode detects licenses, copyrights, dependencies by "scanning code" ... to discover and inventory open source and third-party packages used in your code. Sponsored by NLnet, the Google Summer of Code, Azure credits, nexB and other generous sponsors!

Software Supply Chain Transparency Log

The official repository for the AiiDA code

An admission controller that integrates Container Image Signature Verification into a Kubernetes cluster

Effortless method to record provenance in Python

Fail CI when dependencies in your lockfile lose npm provenance or trusted publisher status

Blue Brain Nexus - A knowledge graph for data-driven science

Meta Seal is an open-source suite of watermarking models, code, and research developed by Meta to advance the state of content authenticity and attribution across multiple modalities.

Log shell-commands and used files. Snapshot executed scripts. Fully automatic.

An open-source, vendor-neutral data context service.

A Python library for W3C Provenance Data Model (PROV)

VisTrails is an open-source data analysis and visualization tool. It provides a comprehensive provenance infrastructure that maintains detailed history information about the steps followed and data derived in the course of an exploratory task: VisTrails maintains provenance of data products, of the computational processes that derive these products and their executions.

Template Go app repo with local test/lint/build/vulnerability check workflow, and on tag image test/build/release pipelines, with ko generative SBOM, cosign attestation, and SLSA build provenance

Turn your scattered AI coding sessions into a queryable knowledge graph. Multi-platform (Claude Code, ChatGPT, DeepSeek, Grok, Warp), W3C ontology, Wikidata entity linking, SPARQL.

TrustMark - Universal Watermarking for Arbitrary Resolution Images

A framework for building provenance-based intrusion detection systems with neural networks

Java toolkit to create and convert W3C PROV data model representations, and build provenance-enabled applications in a variety of programming languages (java, python, typescript, javascript)

A highly configurable build executor and observer designed to generate signed SLSA provenance attestations about build runs.

No description provided.

Data-linked visualisations

A set of documents addressing the structure of and supporting services for xAPI Profiles.

ZK proofs for image authenticity

Ontology for representing scientific evidence and provenance information

Github Action implementation of SLSA Provenance Generation

Persist is a JupyterLab extension to enable persistent interactive visualizations in JupyterLab notebooks.

Container image provenance spec that allows tracing CVEs detected in registry images back to a CVE's source of origin.

Open schemas for F.A.I.R. neuroscience data

Python implementation of C2PA: Coalition for Content Provenance and Authenticity.

Provenance and caching library for python functions, built for creating lightweight machine learning pipelines

A version control system for RDF datasets