in-toto is a framework to protect supply chain integrity. in-toto was accepted to CNCF on August 14, 2019 and is at the incubating project maturity level. Visit Project Website