in-toto

in-toto is a framework to protect supply chain integrity.

in-toto was accepted to CNCF on August 21, 2019 and is at the Incubating project maturity level.