Projects

in-toto

in-toto is a framework to protect supply chain integrity.

in-toto was accepted to CNCF on August 14, 2019, moved to the Incubating maturity level on March 10, 2022, and then moved to the Graduated maturity level on February 10, 2025.
Visit Project Website

in-toto case studies

Related Case Studies

Autodesk

Autodesk

FedRamp ATO Achieved

February 2, 2025

How Autodesk achieved FedRAMP compliance with Witness & Archivista

Read Case Study

Recent in-toto news

See all news

CNCF Announces Graduation of in-toto Security Framework, Enhancing Software Supply Chain Integrity Across Industries

 April 23, 2025

Congratulations to 45 CNCF Term 2 2024 LFX Program mentees!

 September 27, 2024

Lessons from CrowdStrike’s buggy update: the critical importance of robust release processes

 July 19, 2024