🔐CNCF Security Technical Advisory Group -- secure access, policy control, privacy, auditing, explainability and more!

in-toto is a framework to protect supply chain integrity.

TUF repository for Sigstore trust root

standard for Uptane

TUF Augmentation Proposals (TAPs)

Go implementation of The Update Framework (TUF)

Python reference implementation of The Update Framework (TUF)

Code signing and transparency for containers and binaries

The Update Framework specification