nowfound

Dev tools · March 16, 2023

Chainloop, A Software Supply Chain Attestation solution devs won't hate

Hi, my name is Miguel and I am very happy to share what's been months worth of work :) The project has rough edges for sure, but any early feedback, comments or concerns are appreciated! === The Problem === You work on the Security and Operations (SecOps) team in charge of your organization's Software Supply Chain Security. You feel pretty good about the state of things already, your developer teams are signing their commits, deliverables, scanning for vulnerabilities,… Life is good! Then you realize that you are not compliant with the latest security requirements. You get referred to…

Chainloop, A Software Supply Chain Attestation solution devs won't hate launched on March 16, 2023 with 45 votes, #1,666 of 5,007 launches that month and more than 90% of that year's launches. The site was still online in September 2026, 3 years on.

In plain words

Chainloop is a software supply chain attestation solution that helps organizations achieve security compliance requirements like SLSA level 3. It enables development and security teams to document and verify the integrity of their software delivery process through attestation and artifact management. The tool is designed for adoption by developer teams, focusing on making compliance accessible rather than burdensome.

written from the facts on this page · September 2026

From the sources

SDLC evidence store and policy engine for your Software Supply Chain attestations, SBOMs, VEX, SARIF, QA reports, and more - chainloop-dev/chainloop

In the maker’s words, at launch

Hi, my name is Miguel and I am very happy to share what's been months worth of work :) The project has rough edges for sure, but any early feedback, comments or concerns are appreciated! === The Problem === You work on the Security and Operations (SecOps) team in charge of your organization's Software Supply Chain…

Does a similar job

all alternatives →
  • Sploi2024 · sploi.com · ▲100

    The all-in-one pentesting platform

  • Metlo API Security2022 · metlo.com · ▲207

    Open source API security platform

  • Arnica2022 · arnica.io · ▲97

    Behavior based software supply chain security

  • Syncloop2023 · syncloop.ai · ▲93

    API development platform to create, deploy and test APIs

  • DiploiMar 2026 · diploi.com · ▲99

    After 20+ years in consulting you are entitled to build your own deployment platform, right. So that's what we did. We needed something powerful, supporting all stages from development to production, where new developers can be productive in minutes. Something fun to prototype with, with minimal DevOps but still flexible enough for a wide range of projects. We identified three principles 1. Own your stack - Keep as much of your project inside the platform (also databases, S3) so development will match production and cloning and maintaining and testing, will be easy 2. Infrastructure as code…

  • Bytesafe2021 · bytesafe.dev · ▲66

    A better way to control your software supply chain

More dev tools this month

the category →
  • /dev/null▲481

    a social network for devs

    Dev tools · 2d ago · dev-null.sh

  • open-source IDE for thoughtful software design. Contribute to devdotfast/whiteboard development by creating an account on GitHub.

    Dev tools · 27d ago · github.com

  • Contribute to reladraw/reladraw development by creating an account on GitHub.

    Dev tools · 25d ago · github.com

  • OpenBot▲362

    Grok Bot alternative: free, local, open-source, multiplayer

    Dev tools · 22d ago · openbot.run

  • Talanoa▲341

    Hi HN, I’m a fullstack developer, and honestly, I’ve lost count of how many side projects I’ve worked on over the years. But one idea kept coming back to me: a different kind of email client. It first came to me in 2014: “What if we could handle emails more like conversations?” Every year, I’d revisit this concept in my “Build Notes.” Ten years later, no one had built exactly what I had in mind — so I finally decided to do it myself. That’s how Talanoa was born. I wanted something focused on people, not timelines. I was tired of marking messages as unread just to remember to reply later, or…

    Dev tools · 20d ago · talanoa.email

  • CoreSpeed▲332

    One MCP for everything your agents need: apps, memory, tools

    Dev tools · 27d ago · corespeed.io

Source: Show HN post ↗ · launch text quoted in part

Launched alongside, March 2023

the whole month →
  • GPT-4▲1,160

    More accurate, less cringe, smoother & useful daily chats!

    AI · 2023 · openai.com

  • Collato▲972

    One AI search to find anything instantly, across all apps

    AI · 2023

  • Chat with AI using your API keys. Pay only for what you use. ChatGPT, Gemini, Claude, and other LLMs supported. The best chat LLM frontend UI for all AI models.

    AI · 2023 · typingmind.com

  • Meet the internet again

    Work · 2023 · apps.apple.com

  • Sequoia▲726

    Personalized men's sexual health with on-demand experts

    Life & fun · 2023 · sequoia.health

  • BI

    I'm a big fan of the BBC podcast In Our Time -- and (like most people) I've been playing with the OpenAI APIs. In Our Time has almost 1,000 episodes on everything from Cleopatra to the evolution of teeth to plasma physics, all still available, so it's my starting point to learn about most topics. But it's not well organised. So here are the episodes sorted by library code. It's fun to explore. Web scraping is usually pretty tedious, but I found that I could send the minimised HTML to GPT-3 and get (almost) perfect JSON back: the prompt includes the Typescript definition. At the same time I…

    AI · 2023 · genmon.github.io