Repositories list

• witness

  Public
  Witness is a pluggable framework for software supply chain risk management. It automates, normalizes, and verifies software artifact provenance.

  supply-chainverificationattestation+ 2security-toolssecurity

  Go

  •

  Apache License 2.0

  •60•420•67•7•Updated Jan 6, 2025Jan 6, 2025

• archivista

  Public
  Archivista is a graph and storage service for in-toto attestations. Archivista enables the discovery and retrieval of attestations for software artifacts.

  Go

  •

  Apache License 2.0

  •25•76•25•13•Updated Jan 4, 2025Jan 4, 2025

• in-toto-rs

  Public
  A rust implementation of in-toto

  securitysoftware-supply-chain

  Rust

  •

  MIT License

  •14•31•4•0•Updated Jan 2, 2025Jan 2, 2025

• friends

  Public
  Friends of in-toto! A place to record integrations and adoptions of the in-toto specification.

  Python

  •12•13•4•0•Updated Jan 1, 2025Jan 1, 2025

• in-toto

  Public
  in-toto is a framework to protect supply chain integrity.

  securitysupply-chainnew-york-university+ 1secure-systems-lab

  Python

  •

  Other

  •141•895•42•5•Updated Jan 1, 2025Jan 1, 2025

• attestation

  Public
  in-toto Attestation Framework

  attestationsoftware-supply-chain-security

  Go

  •

  Other

  •70•252•57•8•Updated Dec 30, 2024Dec 30, 2024

• attestation-verifier

  Public
  Prototype in-toto attestation verifier based on ITE-10 and ITE-11 layouts

  in-toto

  Go

  •

  Other

  •6•15•4•5•Updated Dec 24, 2024Dec 24, 2024

• scai-demos

  Public
  Software Supply Chain Attribute Integrity (SCAI) Demos and CLI tools

  clidemosattestations+ 1software-supply-chain-security

  Go

  •

  Apache License 2.0

  •4•18•1•1•Updated Dec 23, 2024Dec 23, 2024

• go-witness

  Public
  Go implementation of witness

  Go

  •

  Apache License 2.0

  •21•28•20•11•Updated Dec 23, 2024Dec 23, 2024

• in-toto-golang

  Public
  A Go implementation of in-toto. in-toto is a framework to protect software supply chain integrity.

  securitysoftware-supply-chainin-toto

  Go

  •

  Other

  •51•133•28•3•Updated Dec 23, 2024Dec 23, 2024

• in-toto.io

  Public
  The in-toto website and documentation

  SCSS

  •20•2•14•1•Updated Dec 16, 2024Dec 16, 2024

• ITE

  Public
  in-toto Enhancements

  Other

  •16•19•6•1•Updated Dec 13, 2024Dec 13, 2024

• helm-charts

  Public
  in-toto helm charts

  Smarty

  •0•0•1•1•Updated Dec 9, 2024Dec 9, 2024

• in-toto.github.io

  Public archive
  In-toto's website.

  HTML

  •

  MIT License

  •8•0•6•0•Updated Dec 6, 2024Dec 6, 2024

• community

  Public
  in-toto is a framework to secure the software supply chain.

  cncfsoftware-supply-chainin-toto+ 1software-supply-chain-security

  10•69•13•2•Updated Dec 3, 2024Dec 3, 2024

• demo

  Public
  Securing Alice's, Bob's and Carl's software supply chain using in-toto

  Python

  •40•89•3•2•Updated Nov 28, 2024Nov 28, 2024

• apt-transport-in-toto

  Public
  in-toto transport for apt

  Python

  •

  Other

  •6•8•8•1•Updated Sep 25, 2024Sep 25, 2024

• in-toto-java

  Public
  A Java implementation of in-toto runlib

  Java

  •

  MIT License

  •13•12•4•16•Updated Jul 23, 2024Jul 23, 2024

• ite-4-demo-test-repo

  Public
  Python

  •1•0•0•0•Updated Jul 17, 2024Jul 17, 2024

• in-toto-jenkins-plugin

  Public
  A Jenkins plugin to track steps and create in-toto link metadata

  Java

  •

  MIT License

  •14•5•5•4•Updated Jun 14, 2024Jun 14, 2024

• in-toto-inspections

  Public
  A set of common in-toto inspections

  Python

  •

  MIT License

  •3•1•0•0•Updated May 27, 2024May 27, 2024

• specification

  Public
  Specification and other related documents.

  Python

  •

  MIT License

  •26•42•9•2•Updated May 15, 2024May 15, 2024

• rebuilderd-website

  Public
  Arch Linux Rebuilderd status webpage (read-only mirror)

  JavaScript

  •

  MIT License

  •6•0•0•0•Updated Apr 11, 2024Apr 11, 2024

• layout-web-tool

  Public archive
  A flask app that helps to create, modify and visualize in-toto layouts.

  Python

  •

  MIT License

  •8•2•31•2•Updated Apr 11, 2024Apr 11, 2024

• in-toto-testing

  Public
  Python

  •0•3•1•0•Updated Feb 24, 2024Feb 24, 2024

• Dockerfiles

  Public
  Dockerfile

  •1•5•0•1•Updated Jan 29, 2024Jan 29, 2024

• windows-setup

  Public
  1•0•0•0•Updated May 8, 2023May 8, 2023

• image-resources

  Public
  This repo contains image-related resources for in-toto

  2•1•0•0•Updated Jan 15, 2023Jan 15, 2023

• github-action

  Public
  in-toto provenance github action

  JavaScript

  •0•8•5•0•Updated Oct 31, 2022Oct 31, 2022

• ite-4-demo

  Public
  Python

  •2•1•0•0•Updated Oct 26, 2022Oct 26, 2022