Repositories list

• go-witness

  Public
  Go implementation of witness

  Go

  •

  Apache License 2.0

  •23•34•20•9•Updated Apr 17, 2025Apr 17, 2025

• witness

  Public
  Witness is a pluggable framework for software supply chain risk management. It automates, normalizes, and verifies software artifact provenance.

  supply-chainverificationattestation+ 2security-toolssecurity

  Go

  •

  Apache License 2.0

  •62•444•70•5•Updated Apr 17, 2025Apr 17, 2025

• in-toto-golang

  Public
  A Go implementation of in-toto. in-toto is a framework to protect software supply chain integrity.

  securitysoftware-supply-chainin-toto

  Go

  •

  Other

  •52•137•28•9•Updated Apr 16, 2025Apr 16, 2025

• friends

  Public
  Friends of in-toto! A place to record integrations and adoptions of the in-toto specification.

  Python

  •13•14•5•0•Updated Apr 16, 2025Apr 16, 2025

• archivista

  Public
  Archivista is a graph and storage service for in-toto attestations. Archivista enables the discovery and retrieval of attestations for software artifacts.

  Go

  •

  Apache License 2.0

  •25•85•25•4•Updated Apr 16, 2025Apr 16, 2025

• attestation

  Public
  in-toto Attestation Framework

  attestationsoftware-supply-chain-security

  Go

  •

  Other

  •74•266•58•3•Updated Apr 15, 2025Apr 15, 2025

• scai-demos

  Public
  Software Supply Chain Attribute Integrity (SCAI) Demos and CLI tools

  clidemosattestations+ 1software-supply-chain-security

  Go

  •

  Apache License 2.0

  •4•18•1•0•Updated Apr 15, 2025Apr 15, 2025

• in-toto

  Public
  in-toto is a framework to protect supply chain integrity.

  securitysupply-chainnew-york-university+ 1secure-systems-lab

  Python

  •

  Other

  •143•915•41•10•Updated Apr 14, 2025Apr 14, 2025

• helm-charts

  Public
  in-toto helm charts

  Smarty

  •1•0•1•0•Updated Apr 2, 2025Apr 2, 2025

• attestation-verifier

  Public
  Prototype in-toto attestation verifier based on ITE-10 and ITE-11 layouts

  in-toto

  Go

  •

  Other

  •6•16•4•5•Updated Mar 25, 2025Mar 25, 2025

• demo

  Public
  Securing Alice's, Bob's and Carl's software supply chain using in-toto

  Python

  •40•92•3•2•Updated Mar 25, 2025Mar 25, 2025

• in-toto-rs

  Public
  A rust implementation of in-toto

  securitysoftware-supply-chain

  Rust

  •

  MIT License

  •14•31•5•2•Updated Mar 4, 2025Mar 4, 2025

• ITE

  Public
  in-toto Enhancements

  Other

  •17•19•6•2•Updated Feb 17, 2025Feb 17, 2025

• specification

  Public
  Specification and other related documents.

  Python

  •

  MIT License

  •28•45•7•2•Updated Jan 13, 2025Jan 13, 2025

• community

  Public
  in-toto is a framework to secure the software supply chain.

  cncfsoftware-supply-chainin-toto+ 1software-supply-chain-security

  10•70•9•2•Updated Jan 9, 2025Jan 9, 2025

• in-toto.io

  Public
  The in-toto website and documentation

  SCSS

  •19•4•14•1•Updated Dec 16, 2024Dec 16, 2024

• in-toto.github.io

  Public archive
  In-toto's website.

  HTML

  •

  MIT License

  •8•1•6•0•Updated Dec 6, 2024Dec 6, 2024

• apt-transport-in-toto

  Public
  in-toto transport for apt

  Python

  •

  Other

  •6•8•8•1•Updated Sep 25, 2024Sep 25, 2024

• in-toto-java

  Public
  A Java implementation of in-toto runlib

  Java

  •

  MIT License

  •12•11•4•16•Updated Jul 23, 2024Jul 23, 2024

• ite-4-demo-test-repo

  Public
  Python

  •1•0•0•0•Updated Jul 17, 2024Jul 17, 2024

• in-toto-jenkins-plugin

  Public
  A Jenkins plugin to track steps and create in-toto link metadata

  Java

  •

  MIT License

  •14•5•5•2•Updated Jun 14, 2024Jun 14, 2024

• in-toto-inspections

  Public
  A set of common in-toto inspections

  Python

  •

  MIT License

  •3•1•0•0•Updated May 27, 2024May 27, 2024

• rebuilderd-website

  Public
  Arch Linux Rebuilderd status webpage (read-only mirror)

  JavaScript

  •

  MIT License

  •6•0•0•0•Updated Apr 11, 2024Apr 11, 2024

• layout-web-tool

  Public archive
  A flask app that helps to create, modify and visualize in-toto layouts.

  Python

  •

  MIT License

  •8•2•31•2•Updated Apr 11, 2024Apr 11, 2024

• in-toto-testing

  Public
  Python

  •0•3•1•0•Updated Feb 24, 2024Feb 24, 2024

• Dockerfiles

  Public
  Dockerfile

  •1•6•0•1•Updated Jan 29, 2024Jan 29, 2024

• windows-setup

  Public
  1•0•0•0•Updated May 8, 2023May 8, 2023

• image-resources

  Public
  This repo contains image-related resources for in-toto

  2•1•0•0•Updated Jan 15, 2023Jan 15, 2023

• github-action

  Public
  in-toto provenance github action

  JavaScript

  •0•8•5•0•Updated Oct 31, 2022Oct 31, 2022

• ite-4-demo

  Public
  Python

  •2•1•0•0•Updated Oct 26, 2022Oct 26, 2022