Pinned Loading

1. in-toto/witness in-toto/witness Public

   Witness is a pluggable framework for software supply chain risk management. It automates, normalizes, and verifies software artifact provenance.

   Go 498 70

2. in-toto/attestation in-toto/attestation Public

   in-toto Attestation Framework

   Rust 299 93

3. in-toto/archivista in-toto/archivista Public

   Archivista is a graph and storage service for in-toto attestations. Archivista enables the discovery and retrieval of attestations for software artifacts.

   Go 101 32

4. in-toto/go-witness in-toto/go-witness Public

   Go implementation of witness

   Go 37 29