in-toto/demo

Stars
83
Rank 392,854 (Top 8 %)
Language
Python
Created about 7 years ago
Updated 2 months ago

in-toto/demo

in-toto

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Securing Alice's, Bob's and Carl's software supply chain using in-toto

in-toto

in-toto is a framework to protect supply chain integrity.

witness

Witness is a pluggable framework for software supply chain risk management. It automates, normalizes, and verifies software artifact provenance.

attestation

in-toto Attestation Framework

in-toto-golang

A Go implementation of in-toto. in-toto is a framework to protect software supply chain integrity.

community

in-toto is a framework to secure the software supply chain.

archivista

Archivista is a graph and storage service for in-toto attestations. Archivista enables the discovery and retrieval of attestations for software artifacts.

specification

Specification and other related documents.

in-toto-rs

A rust implementation of in-toto

supply-chain-compromises

go-witness

Go implementation of witness

ITE

in-toto Enhancements

scai-demos

Software Supply Chain Attribute Integrity (SCAI) Demos and CLI tools

attestation-verifier

Prototype in-toto attestation verifier based on ITE-10 and ITE-11 layouts

friends

Friends of in-toto! A place to record integrations and adoptions of the in-toto specification.

in-toto-java

A Java implementation of in-toto runlib

kubectl-in-toto

github-action

in-toto provenance github action

in-toto-webhook

apt-transport-in-toto

in-toto transport for apt

Dockerfiles

totoify-grafeas

in-toto-testing

in-toto.io

The in-toto website and documentation

layout-web-tool

A flask app that helps to create, modify and visualize in-toto layouts.

image-resources

This repo contains image-related resources for in-toto

in-toto-inspections

A set of common in-toto inspections

ite-4-demo

demo-jekyll

Metadata and scripts to secure a basic jekyll supply chain with in-toto and grafeas