Repositories list

• archivista

  Public
  Archivista is a graph and storage service for in-toto attestations. Archivista enables the discovery and retrieval of attestations for software artifacts.

  Go

  •

  Apache License 2.0

  •32•102•29•13•Updated Nov 5, 2025Nov 5, 2025

• in-toto

  Public
  in-toto is a framework to protect supply chain integrity.

  securitysupply-chainnew-york-university+ 1secure-systems-lab

  Python

  •

  Other

  •150•955•41•9•Updated Nov 4, 2025Nov 4, 2025

• go-witness

  Public
  Go implementation of witness

  Go

  •

  Apache License 2.0

  •30•41•30•10•Updated Nov 3, 2025Nov 3, 2025

• friends

  Public

  in-toto/friends’s past year of commit activity
  Friends of in-toto! A place to record integrations and adoptions of the in-toto specification.

  Python

  •16•19•5•4•Updated Nov 3, 2025Nov 3, 2025

• witness

  Public
  Witness is a pluggable framework for software supply chain risk management. It automates, normalizes, and verifies software artifact provenance.

  securitysupply-chainverification+ 2attestationsecurity-tools

  Go

  •

  Apache License 2.0

  •71•502•73•9•Updated Nov 3, 2025Nov 3, 2025

• in-toto.io

  Public
  The in-toto website and documentation

  SCSS

  •22•11•15•0•Updated Oct 29, 2025Oct 29, 2025

• attestation

  Public
  in-toto Attestation Framework

  attestationsoftware-supply-chain-security

  Rust

  •

  Other

  •95•304•58•6•Updated Oct 20, 2025Oct 20, 2025

• demo

  Public
  Securing Alice's, Bob's and Carl's software supply chain using in-toto

  Python

  •41•99•3•1•Updated Oct 16, 2025Oct 16, 2025

• in-toto-golang

  Public
  A Go implementation of in-toto. in-toto is a framework to protect software supply chain integrity.

  securitysoftware-supply-chainin-toto

  Go

  •

  Other

  •53•140•29•14•Updated Oct 8, 2025Oct 8, 2025

• scai-demos

  Public
  Software Supply Chain Attribute Integrity (SCAI) Demos and CLI tools

  clidemosattestations+ 1software-supply-chain-security

  Go

  •

  Apache License 2.0

  •4•18•1•2•Updated Oct 6, 2025Oct 6, 2025

• attestation-verifier

  Public
  Prototype in-toto attestation verifier based on ITE-10 and ITE-11 layouts

  in-toto

  Go

  •

  Other

  •8•17•5•7•Updated Oct 3, 2025Oct 3, 2025

• helm-charts

  Public
  in-toto helm charts

  Smarty

  •2•1•1•0•Updated Sep 2, 2025Sep 2, 2025

• in-toto-rs

  Public
  A rust implementation of in-toto

  securitysoftware-supply-chain

  Rust

  •

  MIT License

  •13•34•5•5•Updated Aug 12, 2025Aug 12, 2025

• ITE

  Public
  in-toto Enhancements

  Other

  •19•18•6•4•Updated Feb 17, 2025Feb 17, 2025

• specification

  Public
  Specification and other related documents.

  Python

  •

  MIT License

  •29•48•7•2•Updated Jan 13, 2025Jan 13, 2025

• community

  Public
  in-toto is a framework to secure the software supply chain.

  cncfsoftware-supply-chainin-toto+ 1software-supply-chain-security

  10•71•9•2•Updated Jan 9, 2025Jan 9, 2025

• in-toto.github.io

  Public archive
  In-toto's website.

  HTML

  •

  MIT License

  •8•1•6•0•Updated Dec 6, 2024Dec 6, 2024

• apt-transport-in-toto

  Public
  in-toto transport for apt

  Python

  •

  Other

  •7•8•9•1•Updated Sep 25, 2024Sep 25, 2024

• in-toto-java

  Public
  A Java implementation of in-toto runlib

  Java

  •

  MIT License

  •12•11•4•16•Updated Jul 23, 2024Jul 23, 2024

• ite-4-demo-test-repo

  Public
  Python

  •1•0•0•0•Updated Jul 17, 2024Jul 17, 2024

• in-toto-jenkins-plugin

  Public
  A Jenkins plugin to track steps and create in-toto link metadata

  Java

  •

  MIT License

  •13•5•5•2•Updated Jun 14, 2024Jun 14, 2024

• in-toto-inspections

  Public
  A set of common in-toto inspections

  Python

  •

  MIT License

  •3•1•0•0•Updated May 27, 2024May 27, 2024

• rebuilderd-website

  Public
  Arch Linux Rebuilderd status webpage (read-only mirror)

  JavaScript

  •

  MIT License

  •7•0•0•0•Updated Apr 11, 2024Apr 11, 2024

• layout-web-tool

  Public archive
  A flask app that helps to create, modify and visualize in-toto layouts.

  Python

  •

  MIT License

  •8•2•31•2•Updated Apr 11, 2024Apr 11, 2024

• in-toto-testing

  Public
  Python

  •0•3•1•0•Updated Feb 24, 2024Feb 24, 2024

• Dockerfiles

  Public
  Dockerfile

  •1•6•0•1•Updated Jan 29, 2024Jan 29, 2024

• windows-setup

  Public
  1•0•0•0•Updated May 8, 2023May 8, 2023

• image-resources

  Public
  This repo contains image-related resources for in-toto

  2•1•0•0•Updated Jan 15, 2023Jan 15, 2023

• github-action

  Public
  in-toto provenance github action

  JavaScript

  •0•8•5•0•Updated Oct 31, 2022Oct 31, 2022

• ite-4-demo

  Public
  Python

  •2•1•0•0•Updated Oct 26, 2022Oct 26, 2022