Skip to content
@in-toto

in-toto

A framework to protect software supply chain integrity

Pinned Loading

  1. in-toto in-toto Public

    in-toto is a framework to protect supply chain integrity.

    Python 994 153

  2. community community Public

    in-toto is a framework to secure the software supply chain.

    73 11

  3. friends friends Public

    Friends of in-toto! A place to record integrations and adoptions of the in-toto specification.

    Python 21 18

  4. attestation attestation Public

    in-toto Attestation Framework

    Rust 332 110

  5. ITE ITE Public

    in-toto Enhancements

    20 19

  6. specification specification Public

    Specification and other related documents.

    Python 50 27

Repositories

Showing 10 of 43 repositories
  • witness Public

    Witness is a pluggable framework for software supply chain risk management. It automates, normalizes, and verifies software artifact provenance.

    in-toto/witness’s past year of commit activity
    Go 523 Apache-2.0 77 69 (2 issues need help) 9 Updated Apr 20, 2026
  • archivista Public

    Archivista is a graph and storage service for in-toto attestations. Archivista enables the discovery and retrieval of attestations for software artifacts.

    in-toto/archivista’s past year of commit activity
    Go 108 Apache-2.0 32 30 (1 issue needs help) 15 Updated Apr 18, 2026
  • go-witness Public

    Go implementation of witness

    in-toto/go-witness’s past year of commit activity
    Go 48 Apache-2.0 36 32 (2 issues need help) 11 Updated Apr 17, 2026
  • scai-demos Public

    Software Supply Chain Attribute Integrity (SCAI) Demos and CLI tools

    in-toto/scai-demos’s past year of commit activity
    Go 19 Apache-2.0 5 1 4 Updated Apr 14, 2026
  • in-toto Public

    in-toto is a framework to protect supply chain integrity.

    in-toto/in-toto’s past year of commit activity
    Python 994 153 41 (1 issue needs help) 15 Updated Apr 13, 2026
  • attestation Public

    in-toto Attestation Framework

    in-toto/attestation’s past year of commit activity
    Rust 332 110 57 (3 issues need help) 6 Updated Apr 13, 2026
  • in-toto-golang Public

    A Go implementation of in-toto. in-toto is a framework to protect software supply chain integrity.

    in-toto/in-toto-golang’s past year of commit activity
    Go 148 54 28 (8 issues need help) 6 Updated Apr 10, 2026
  • attestation-verifier Public

    Prototype in-toto attestation verifier based on ITE-10 and ITE-11 layouts

    in-toto/attestation-verifier’s past year of commit activity
    Go 19 8 5 7 Updated Apr 8, 2026
  • friends Public

    Friends of in-toto! A place to record integrations and adoptions of the in-toto specification.

    in-toto/friends’s past year of commit activity
    Python 21 18 5 (1 issue needs help) 10 Updated Apr 6, 2026
  • community Public

    in-toto is a framework to secure the software supply chain.

    in-toto/community’s past year of commit activity
    73 11 10 2 Updated Apr 3, 2026
View all repositories

Top languages

Loading…

Most used topics

Loading…