Go · Apache-2.0
chainloop-dev/chainloop
Agentic SDLC infrastructure. Define guardrails. Collect signals. Enforce continuously. Signed records of what your AI coding agents and CI/CD pipelines did, checked against policies as code, with the loop closed in CI/CD. AI sessions, SBOMs, VEX, SARIF and SLSA provenance, built on Sigstore and in-toto. Apache 2.0.
★ 584
Stars
62 forks · 27 open issues
—
Growth · stale
We stopped seeing this repository in its topic's top results, so its star count is frozen at the date it was last read. Subtracting from a frozen number would read as zero growth, which would be false, so no rate is shown.
21.0
Momentum / 100
see the breakdown below
3y ago
Created
last push 27d ago
Star history
How this score was built
| Component | Weight | Earned | Why |
|---|---|---|---|
| Velocity | 55 | 0.0 | — — no measurable rate |
| Acceleration | 15 | 0.0 | needs 7-day and 30-day rates side by side |
| Freshness | 15 | 13.0 | last push 27d ago; decays to zero at 180 days |
| Scale | 15 | 8.0 | 584 stars, log-scaled against 150k — stops a 3-star repo topping the board |
| Momentum | 100 | 21.0 | capped at 35 because growth is unmeasured |
Detail
| Topics | agentic-sdlcai-agentsai-governanceai-sessionsattestationautonomous-agentscoding-agentscompliancecyclonedxdevsecopsguardrailsin-totopolicy-as-codeprovenancesbomslsasoftware-factoryspdxsupply-chain-securityvex |
| Matched on | AI Agents (autonomous-agents) |
| Short window | no snapshot 5–10 days old yet |
| Long window | +1 stars over 26 days = 0.0/day |
| Lifetime average | 0.44 stars/day over 1,340 days |
| First seen here | 2026-10-11 |
| Last read | 27d ago |