registry of instruments
Sensible security, in tool form.
Open-source security engineering by p4gs. Each tool lives at its own path under this domain, with its evidence in the open.
SSCS Bootstrapper
/sscsb
Software supply chain security bootstrapped in one command — plus the public scan directory: repositories graded A+ to F under a published methodology, with authenticated scans from their own CI.
DIRECTORY
3 repos scanned
44 controls each
2 lanes · ext + auth