dalec

Dalec is a tool designed for securely building system packages and containers using a declarative configuration format, with a particular emphasis on supply chain security. It supports multiple package formats (DEB, RPM, and Windows containers) while ensuring minimal image sizes to reduce vulnerabilities, along with features like signed packages and build-time Software Bill of Materials (SBOMs) for provenance attestations. The tool operates with Docker as its sole dependency, simplifying the usage for various target operating systems.