Skip to content
@in-toto

in-toto

A framework to protect software supply chain integrity

Pinned

  1. in-toto in-toto Public

    in-toto is a framework to protect supply chain integrity.

    Python 860 135

  2. community community Public

    in-toto is a framework to secure the software supply chain.

    62 8

  3. friends friends Public

    Friends of in-toto! A place to record integrations and adoptions of the in-toto specification.

    Python 12 10

  4. attestation attestation Public

    in-toto Attestation Framework

    Go 227 57

  5. ITE ITE Public

    in-toto Enhancements

    19 15

  6. specification specification Public

    Specification and other related documents.

    Python 37 25

Repositories

Showing 10 of 42 repositories
  • witness Public

    Witness is a pluggable framework for software supply chain risk management. It automates, normalizes, and verifies software artifact provenance.

    in-toto/witness’s past year of commit activity
    Go 400 Apache-2.0 57 63 (1 issue needs help) 5 Updated Aug 31, 2024
  • archivista Public

    Archivista is a graph and storage service for in-toto attestations. Archivista enables the discovery and retrieval of attestations for software artifacts.

    in-toto/archivista’s past year of commit activity
    Go 56 Apache-2.0 24 24 (1 issue needs help) 6 Updated Aug 30, 2024
  • demo Public

    Securing Alice's, Bob's and Carl's software supply chain using in-toto

    in-toto/demo’s past year of commit activity
    Python 83 33 3 3 Updated Aug 30, 2024
  • in-toto.io Public

    The in-toto website and documentation

    in-toto/in-toto.io’s past year of commit activity
    HTML 2 19 9 1 Updated Aug 30, 2024
  • in-toto-golang Public

    A Go implementation of in-toto. in-toto is a framework to protect software supply chain integrity.

    in-toto/in-toto-golang’s past year of commit activity
    Go 128 51 27 (8 issues need help) 6 Updated Aug 28, 2024
  • go-witness Public

    Go implementation of witness

    in-toto/go-witness’s past year of commit activity
    Go 21 Apache-2.0 18 19 (1 issue needs help) 3 Updated Aug 28, 2024
  • friends Public

    Friends of in-toto! A place to record integrations and adoptions of the in-toto specification.

    in-toto/friends’s past year of commit activity
    Python 12 10 3 (1 issue needs help) 8 Updated Aug 26, 2024
  • attestation-verifier Public

    Prototype in-toto attestation verifier based on ITE-10 and ITE-11 layouts

    in-toto/attestation-verifier’s past year of commit activity
    Go 15 7 4 4 Updated Aug 18, 2024
  • scai-demos Public

    Software Supply Chain Attribute Integrity (SCAI) Demos and CLI tools

    in-toto/scai-demos’s past year of commit activity
    Go 18 Apache-2.0 4 1 1 Updated Aug 13, 2024
  • in-toto Public

    in-toto is a framework to protect supply chain integrity.

    in-toto/in-toto’s past year of commit activity
    Python 860 135 41 (1 issue needs help) 7 Updated Aug 12, 2024
View all repositories

Most used topics

Loading…