in-toto

in-toto is a framework to protect supply chain integrity.

in-toto was accepted to CNCF on August 14, 2019 and moved to the Incubating maturity level on March 10, 2022.