Pinned Loading

1. in-toto/witness in-toto/witness Public

   Witness is a pluggable framework for software supply chain risk management. It automates, normalizes, and verifies software artifact provenance.

   Go 415 60

2. in-toto/archivista in-toto/archivista Public

   Archivista is a graph and storage service for in-toto attestations. Archivista enables the discovery and retrieval of attestations for software artifacts.

   Go 73 24

3. in-toto/go-witness in-toto/go-witness Public

   Go implementation of witness

   Go 26 21

4. testifysec/swf testifysec/swf Public

   Makefile 6 2