in-toto

in-toto is a framework to protect supply chain integrity.

in-toto was accepted to CNCF on August 14, 2019 and is at the incubating project maturity level.