Pinned Loading
Repositories
Showing 10 of 43 repositories
- archivista Public
Archivista is a graph and storage service for in-toto attestations. Archivista enables the discovery and retrieval of attestations for software artifacts.
in-toto/archivista’s past year of commit activity - attestation-verifier Public
Prototype in-toto attestation verifier based on ITE-10 and ITE-11 layouts
in-toto/attestation-verifier’s past year of commit activity - friends Public
Friends of in-toto! A place to record integrations and adoptions of the in-toto specification.
in-toto/friends’s past year of commit activity - in-toto-golang Public
A Go implementation of in-toto. in-toto is a framework to protect software supply chain integrity.
in-toto/in-toto-golang’s past year of commit activity - witness Public
Witness is a pluggable framework for software supply chain risk management. It automates, normalizes, and verifies software artifact provenance.
in-toto/witness’s past year of commit activity
Top languages
Loading…
Most used topics
Loading…