in-toto

in-toto is a framework to protect supply chain integrity.

in-toto

Witness is a pluggable framework for software supply chain risk management. It automates, normalizes, and verifies software artifact provenance.

in-toto

A Go implementation of in-toto. in-toto is a framework to protect software supply chain integrity.

in-toto

in-toto Attestation Framework

in-toto

Securing Alice's, Bob's and Carl's software supply chain using in-toto

in-toto

Specification and other related documents.

in-toto

A rust implementation of in-toto

in-toto

in-toto

in-toto is a framework to secure the software supply chain.

in-toto

Software Supply Chain Attribute Integrity (SCAI) Demos and CLI tools

in-toto