in-toto

A framework to protect software supply chain integrity

Pinned Loading

in-toto in-toto Public

in-toto is a framework to protect supply chain integrity.

Python 857 135
community community Public

in-toto is a framework to secure the software supply chain.

58 8
friends friends Public

Friends of in-toto! A place to record integrations and adoptions of the in-toto specification.

Python 11 10
attestation attestation Public

in-toto Attestation Framework

Go 214 51
ITE ITE Public

in-toto Enhancements

17 15
specification specification Public

Specification and other related documents.

Python 35 25

Repositories

in-toto.io Public
The in-toto website and documentation

in-toto/in-toto.io’s past year of commit activity

HTML 2 19 11 1 Updated Jul 24, 2024
attestation-verifier Public
Prototype in-toto attestation verifier based on ITE-10 and ITE-11 layouts

in-toto/attestation-verifier’s past year of commit activity

Go 15 7 4 4 Updated Jul 24, 2024
archivista Public
Archivista is a graph and storage service for in-toto attestations. Archivista enables the discovery and retrieval of attestations for software artifacts.

in-toto/archivista’s past year of commit activity

Go 56 Apache-2.0 23 25 (1 issue needs help) 9 Updated Jul 23, 2024
in-toto-java Public
A Java implementation of in-toto runlib

in-toto/in-toto-java’s past year of commit activity

Java 12 MIT 13 5 16 Updated Jul 23, 2024
scai-demos Public
Software Supply Chain Attribute Integrity (SCAI) Demos and CLI tools

in-toto/scai-demos’s past year of commit activity

Go 18 Apache-2.0 4 1 0 Updated Jul 23, 2024
in-toto Public
in-toto is a framework to protect supply chain integrity.

in-toto/in-toto’s past year of commit activity

Python 857 135 41 (1 issue needs help) 8 Updated Jul 22, 2024
go-witness Public
Go implementation of witness

in-toto/go-witness’s past year of commit activity

Go 20 Apache-2.0 17 19 (1 issue needs help) 12 Updated Jul 22, 2024
friends Public
Friends of in-toto! A place to record integrations and adoptions of the in-toto specification.

in-toto/friends’s past year of commit activity

Python 11 10 3 (1 issue needs help) 8 Updated Jul 22, 2024
demo Public
Securing Alice's, Bob's and Carl's software supply chain using in-toto

in-toto/demo’s past year of commit activity

Python 81 32 3 2 Updated Jul 22, 2024
witness Public
Witness is a pluggable framework for software supply chain risk management. It automates, normalizes, and verifies software artifact provenance.

in-toto/witness’s past year of commit activity

Go 396 Apache-2.0 57 64 (1 issue needs help) 5 Updated Jul 22, 2024