in-toto/witness

Witness is a pluggable framework for software supply chain risk management. It automates, normalizes, and verifies software artifact provenance.

↗ Open on GitHub

Stars

544

Forks

83

Language

Go

License

Apache-2.0

Last push

3 days ago

Go security verification security-tools supply-chain attestation

No related intel yet

This repo has not appeared in any of the sources the radar tracks. The collector runs on a schedule — check back once it covers this repo.