Skip to content

Commit

Permalink
Update README.md (#144)
Browse files Browse the repository at this point in the history
Add overview and feature information to README.md.

Signed-off-by: John Kjell <[email protected]>
  • Loading branch information
jkjell authored Jan 3, 2024
1 parent 9c3dda8 commit 38cbab0
Showing 1 changed file with 23 additions and 0 deletions.
23 changes: 23 additions & 0 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -7,6 +7,29 @@
Archivista is a graph and storage service for [in-toto](https://in-toto.io) attestations. Archivista enables the discovery
and retrieval of attestations for software artifacts.

## Archivista enables you to:

- Store and retrieve in-toto attestations
- Query for relationships between attestations via a GraphQL API
- Validate Witness policy without the need to manually list expected attestations

## Archivista is a trusted store for supply chain metadata

- It creates a graph of supply chain metadata while storing attestations that can be later used for policy validation and flexible querying.
- It is designed to be horizontally scaleable, supporting storing a large number of attestations.
- It supports deployment on major cloud service and infrastructure providers, making it a versatile and flexible solution for securing software supply chains.
- It only stores signed attestations to further enhance security and and increase trust.

## Key Features

- Native support for storing attestations created by Witness
- A GraphQL API endpoint and playground
- Support for MySQL and Postgres database backends
- Support for S3-compatible object storage
- A Helm Chart for deployment in Kubernetes environments
- The ability to download and export attestations to transfer across an air gap
- Support for Darwin, Windows, and ARM architectures.

## How Archivista Works

When an attestation is uploaded to Archivista it will store the entire attestation in a configured object store as well
Expand Down

0 comments on commit 38cbab0

Please sign in to comment.