Repositories list

• archivista

  Public
  Archivista is a graph and storage service for in-toto attestations. Archivista enables the discovery and retrieval of attestations for software artifacts.

  Go

  •

  Apache License 2.0

  •24•73•26•7•Updated Nov 29, 2024Nov 29, 2024

• demo

  Public
  Securing Alice's, Bob's and Carl's software supply chain using in-toto

  Python

  •35•89•3•2•Updated Nov 28, 2024Nov 28, 2024

• attestation

  Public
  in-toto Attestation Framework

  attestationsoftware-supply-chain-security

  Go

  •

  Other

  •69•251•57•5•Updated Nov 26, 2024Nov 26, 2024

• in-toto

  Public
  in-toto is a framework to protect supply chain integrity.

  securitysupply-chainnew-york-university+ 1secure-systems-lab

  Python

  •

  Other

  •140•890•42•6•Updated Nov 25, 2024Nov 25, 2024

• scai-demos

  Public
  Software Supply Chain Attribute Integrity (SCAI) Demos and CLI tools

  clidemosattestations+ 1software-supply-chain-security

  Go

  •

  Apache License 2.0

  •4•18•1•2•Updated Nov 25, 2024Nov 25, 2024

• go-witness

  Public
  Go implementation of witness

  Go

  •

  Apache License 2.0

  •21•26•20•13•Updated Nov 25, 2024Nov 25, 2024

• attestation-verifier

  Public
  Prototype in-toto attestation verifier based on ITE-10 and ITE-11 layouts

  in-toto

  Go

  •

  Other

  •7•15•4•5•Updated Nov 25, 2024Nov 25, 2024

• in-toto-golang

  Public
  A Go implementation of in-toto. in-toto is a framework to protect software supply chain integrity.

  securitysoftware-supply-chainin-toto

  Go

  •

  Other

  •51•133•27•3•Updated Nov 25, 2024Nov 25, 2024

• friends

  Public
  Friends of in-toto! A place to record integrations and adoptions of the in-toto specification.

  Python

  •11•12•4•8•Updated Nov 25, 2024Nov 25, 2024

• witness

  Public
  Witness is a pluggable framework for software supply chain risk management. It automates, normalizes, and verifies software artifact provenance.

  supply-chainverificationattestation+ 2security-toolssecurity

  Go

  •

  Apache License 2.0

  •59•415•66•11•Updated Nov 25, 2024Nov 25, 2024

• in-toto.io

  Public
  The in-toto website and documentation

  HTML

  •19•2•18•0•Updated Nov 22, 2024Nov 22, 2024

• helm-charts

  Public
  in-toto helm charts

  0•0•0•1•Updated Nov 20, 2024Nov 20, 2024

• in-toto-rs

  Public
  A rust implementation of in-toto

  securitysoftware-supply-chain

  Rust

  •

  MIT License

  •14•32•4•0•Updated Nov 19, 2024Nov 19, 2024

• community

  Public
  in-toto is a framework to secure the software supply chain.

  cncfsoftware-supply-chainin-toto+ 1software-supply-chain-security

  10•70•7•3•Updated Nov 1, 2024Nov 1, 2024

• apt-transport-in-toto

  Public
  in-toto transport for apt

  Python

  •

  Other

  •6•8•8•1•Updated Sep 25, 2024Sep 25, 2024

• in-toto-java

  Public
  A Java implementation of in-toto runlib

  Java

  •

  MIT License

  •13•12•4•16•Updated Jul 23, 2024Jul 23, 2024

• ITE

  Public
  in-toto Enhancements

  Other

  •16•19•6•2•Updated Jul 18, 2024Jul 18, 2024

• ite-4-demo-test-repo

  Public
  Python

  •1•0•0•0•Updated Jul 17, 2024Jul 17, 2024

• in-toto-jenkins-plugin

  Public
  A Jenkins plugin to track steps and create in-toto link metadata

  Java

  •

  MIT License

  •14•5•5•4•Updated Jun 14, 2024Jun 14, 2024

• in-toto-inspections

  Public
  A set of common in-toto inspections

  Python

  •

  MIT License

  •3•1•0•0•Updated May 27, 2024May 27, 2024

• specification

  Public
  Specification and other related documents.

  Python

  •

  MIT License

  •26•41•9•2•Updated May 15, 2024May 15, 2024

• rebuilderd-website

  Public
  Arch Linux Rebuilderd status webpage (read-only mirror)

  JavaScript

  •

  MIT License

  •6•0•0•0•Updated Apr 11, 2024Apr 11, 2024

• layout-web-tool

  Public archive
  A flask app that helps to create, modify and visualize in-toto layouts.

  Python

  •

  MIT License

  •8•2•31•2•Updated Apr 11, 2024Apr 11, 2024

• in-toto-testing

  Public
  Python

  •0•3•1•0•Updated Feb 24, 2024Feb 24, 2024

• Dockerfiles

  Public
  Dockerfile

  •1•5•0•1•Updated Jan 29, 2024Jan 29, 2024

• windows-setup

  Public
  1•0•0•0•Updated May 8, 2023May 8, 2023

• image-resources

  Public
  This repo contains image-related resources for in-toto

  2•1•0•0•Updated Jan 15, 2023Jan 15, 2023

• github-action

  Public
  in-toto provenance github action

  JavaScript

  •0•8•5•0•Updated Oct 31, 2022Oct 31, 2022

• ite-4-demo

  Public
  Python

  •2•1•0•0•Updated Oct 26, 2022Oct 26, 2022

• securesystemslib

  Public
  Cryptographic and general-purpose routines for Secure Systems Lab projects at NYU

  Python

  •

  MIT License

  •49•0•1•0•Updated Oct 11, 2022Oct 11, 2022