in-toto

Quote

"A framework to secure the integrity of software supply chains"

Source

https://github.com/in-toto/in-toto

Url

https://in-toto.io