Skip to content

@in-toto in-toto

All

    Repositories list

    44 repositories

    • witness

      Public
      Witness is a pluggable framework for software supply chain risk management. It automates, normalizes, and verifies software artifact provenance.
      securitysupply-chainverification
      securitysupply-chainverificationattestationsecurity-tools
      Go
      •
      Apache License 2.0
      •83•544•67•8•Updated Sep 14, 2026Sep 14, 2026

    • go-witness

      Public
      Go implementation of witness
      Go
      •
      Apache License 2.0
      •40•52•30•27•Updated Sep 12, 2026Sep 12, 2026

    • archivista

      Public
      Archivista is a graph and storage service for in-toto attestations. Archivista enables the discovery and retrieval of attestations for software artifacts.
      Go
      •
      Apache License 2.0
      •36•116•29•10•Updated Sep 12, 2026Sep 12, 2026

    • attestation-verifier

      Public
      Prototype in-toto attestation verifier based on ITE-10 and ITE-11 layouts
      in-toto
      in-toto
      Go
      •
      Other
      •8•19•5•12•Updated Sep 11, 2026Sep 11, 2026

    • attestation

      Public
      in-toto Attestation Framework
      attestationsoftware-supply-chain-security
      attestationsoftware-supply-chain-security
      Rust
      •
      Other
      •127•372•59•15•Updated Sep 11, 2026Sep 11, 2026

    • in-toto-golang

      Public
      A Go implementation of in-toto. in-toto is a framework to protect software supply chain integrity.
      securitysoftware-supply-chainin-toto
      securitysoftware-supply-chainin-toto
      Go
      •
      Other
      •58•151•29•10•Updated Sep 10, 2026Sep 10, 2026

    • friends

      Public
      Friends of in-toto! A place to record integrations and adoptions of the in-toto specification.
      Python
      •19•21•5•9•Updated Sep 4, 2026Sep 4, 2026

    • community

      Public
      in-toto is a framework to secure the software supply chain.
      cncfsoftware-supply-chainin-toto
      cncfsoftware-supply-chainin-totosoftware-supply-chain-security
      11•74•11•2•Updated Sep 3, 2026Sep 3, 2026

    • scai-demos

      Public
      Software Supply Chain Attribute Integrity (SCAI) Demos and CLI tools
      clidemosattestations
      clidemosattestationssoftware-supply-chain-security
      Go
      •
      Apache License 2.0
      •5•19•1•8•Updated Sep 2, 2026Sep 2, 2026

    • .project

      Public
      Project metadata for in-toto - CNCF .project automation
      0•0•1•0•Updated Aug 31, 2026Aug 31, 2026

    • in-toto

      Public
      in-toto is a framework to protect supply chain integrity.
      securitysupply-chainnew-york-university
      securitysupply-chainnew-york-universitysecure-systems-lab
      Python
      •
      Other
      •165•1k•43•18•Updated Aug 27, 2026Aug 27, 2026

    • in-toto-rs

      Public
      A rust implementation of in-toto
      securitysoftware-supply-chain
      securitysoftware-supply-chain
      Rust
      •
      MIT License
      •12•35•6•2•Updated Jul 28, 2026Jul 28, 2026

    • specification

      Public
      Specification and other related documents.
      Python
      •
      MIT License
      •28•53•7•2•Updated Jul 24, 2026Jul 24, 2026

    • in-toto.io

      Public
      The in-toto website and documentation
      SCSS
      •24•16•15•0•Updated May 27, 2026May 27, 2026

    • demo

      Public
      Securing Alice's, Bob's and Carl's software supply chain using in-toto
      Python
      •42•108•3•3•Updated Feb 11, 2026Feb 11, 2026

    • helm-charts

      Public
      in-toto helm charts
      Smarty
      •1•1•1•0•Updated Sep 2, 2025Sep 2, 2025

    • ITE

      Public
      in-toto Enhancements
      Other
      •22•20•6•5•Updated Feb 17, 2025Feb 17, 2025

    • in-toto.github.io

      Public archive
      In-toto's website.
      HTML
      •
      MIT License
      •8•1•6•0•Updated Dec 6, 2024Dec 6, 2024

    • apt-transport-in-toto

      Public
      in-toto transport for apt
      Python
      •
      Other
      •6•8•9•1•Updated Sep 25, 2024Sep 25, 2024

    • in-toto-java

      Public
      A Java implementation of in-toto runlib
      Java
      •
      MIT License
      •12•11•4•16•Updated Jul 23, 2024Jul 23, 2024

    • ite-4-demo-test-repo

      Public
      Python
      •1•0•0•0•Updated Jul 17, 2024Jul 17, 2024

    • in-toto-jenkins-plugin

      Public
      A Jenkins plugin to track steps and create in-toto link metadata
      Java
      •
      MIT License
      •12•5•5•2•Updated Jun 14, 2024Jun 14, 2024

    • in-toto-inspections

      Public
      A set of common in-toto inspections
      Python
      •
      MIT License
      •3•1•0•0•Updated May 27, 2024May 27, 2024

    • rebuilderd-website

      Public
      Arch Linux Rebuilderd status webpage (read-only mirror)
      JavaScript
      •
      MIT License
      •6•0•0•0•Updated Apr 11, 2024Apr 11, 2024

    • layout-web-tool

      Public archive
      A flask app that helps to create, modify and visualize in-toto layouts.
      Python
      •
      MIT License
      •8•3•31•2•Updated Apr 11, 2024Apr 11, 2024

    • in-toto-testing

      Public
      Python
      •0•3•1•0•Updated Feb 24, 2024Feb 24, 2024

    • Dockerfiles

      Public
      Dockerfile
      •1•6•0•1•Updated Jan 29, 2024Jan 29, 2024

    • windows-setup

      Public
      1•0•0•0•Updated May 8, 2023May 8, 2023

    • image-resources

      Public
      This repo contains image-related resources for in-toto
      2•1•0•0•Updated Jan 15, 2023Jan 15, 2023

    • github-action

      Public
      in-toto provenance github action
      JavaScript
      •0•8•5•0•Updated Oct 31, 2022Oct 31, 2022
    ProTip! When viewing an organization's repositories, you can use the props. filter to filter by custom property.