A new open source technology to secure software system updates called The Update Framework, has become the first specification and security project to graduate from the CNCF incubation process. This complements other tools to secure various aspects of the software supply chain.
