Skip to content

@in-toto in-toto

Change the repository type filter

All

    Repositories list

    43 repositories

    • in-toto

      Public
      in-toto is a framework to protect supply chain integrity.
      securitysupply-chainnew-york-university
      securitysupply-chainnew-york-universitysecure-systems-lab
      Python
      •
      Other
      •153•999•42•9•Updated Apr 25, 2026Apr 25, 2026

    • archivista

      Public
      Archivista is a graph and storage service for in-toto attestations. Archivista enables the discovery and retrieval of attestations for software artifacts.
      Go
      •
      Apache License 2.0
      •33•109•30•13•Updated Apr 25, 2026Apr 25, 2026

    • in-toto-golang

      Public
      A Go implementation of in-toto. in-toto is a framework to protect software supply chain integrity.
      securitysoftware-supply-chainin-toto
      securitysoftware-supply-chainin-toto
      Go
      •
      Other
      •54•149•28•6•Updated Apr 24, 2026Apr 24, 2026

    • scai-demos

      Public
      Software Supply Chain Attribute Integrity (SCAI) Demos and CLI tools
      clidemosattestations
      clidemosattestationssoftware-supply-chain-security
      Go
      •
      Apache License 2.0
      •5•19•1•0•Updated Apr 23, 2026Apr 23, 2026

    • community

      Public
      in-toto is a framework to secure the software supply chain.
      cncfsoftware-supply-chainin-toto
      cncfsoftware-supply-chainin-totosoftware-supply-chain-security
      11•73•9•2•Updated Apr 23, 2026Apr 23, 2026

    • attestation-verifier

      Public
      Prototype in-toto attestation verifier based on ITE-10 and ITE-11 layouts
      in-toto
      in-toto
      Go
      •
      Other
      •8•19•5•8•Updated Apr 23, 2026Apr 23, 2026

    • go-witness

      Public
      Go implementation of witness
      Go
      •
      Apache License 2.0
      •36•49•31•8•Updated Apr 21, 2026Apr 21, 2026

    • witness

      Public
      Witness is a pluggable framework for software supply chain risk management. It automates, normalizes, and verifies software artifact provenance.
      securitysupply-chainverification
      securitysupply-chainverificationattestationsecurity-tools
      Go
      •
      Apache License 2.0
      •77•523•69•6•Updated Apr 20, 2026Apr 20, 2026

    • attestation

      Public
      in-toto Attestation Framework
      attestationsoftware-supply-chain-security
      attestationsoftware-supply-chain-security
      Rust
      •
      Other
      •110•332•57•6•Updated Apr 13, 2026Apr 13, 2026

    • friends

      Public
      Friends of in-toto! A place to record integrations and adoptions of the in-toto specification.
      Python
      •18•21•5•10•Updated Apr 6, 2026Apr 6, 2026

    • in-toto-rs

      Public
      A rust implementation of in-toto
      securitysoftware-supply-chain
      securitysoftware-supply-chain
      Rust
      •
      MIT License
      •12•36•6•0•Updated Feb 27, 2026Feb 27, 2026

    • demo

      Public
      Securing Alice's, Bob's and Carl's software supply chain using in-toto
      Python
      •42•104•3•3•Updated Feb 11, 2026Feb 11, 2026

    • in-toto.io

      Public
      The in-toto website and documentation
      SCSS
      •21•14•15•0•Updated Oct 29, 2025Oct 29, 2025

    • helm-charts

      Public
      in-toto helm charts
      Smarty
      •1•1•1•0•Updated Sep 2, 2025Sep 2, 2025

    • ITE

      Public
      in-toto Enhancements
      Other
      •19•20•6•4•Updated Feb 17, 2025Feb 17, 2025

    • specification

      Public
      Specification and other related documents.
      Python
      •
      MIT License
      •27•50•7•2•Updated Jan 13, 2025Jan 13, 2025

    • in-toto.github.io

      Public archive
      In-toto's website.
      HTML
      •
      MIT License
      •8•1•6•0•Updated Dec 6, 2024Dec 6, 2024

    • apt-transport-in-toto

      Public
      in-toto transport for apt
      Python
      •
      Other
      •7•8•9•1•Updated Sep 25, 2024Sep 25, 2024

    • in-toto-java

      Public
      A Java implementation of in-toto runlib
      Java
      •
      MIT License
      •12•11•4•16•Updated Jul 23, 2024Jul 23, 2024

    • ite-4-demo-test-repo

      Public
      Python
      •1•0•0•0•Updated Jul 17, 2024Jul 17, 2024

    • in-toto-jenkins-plugin

      Public
      A Jenkins plugin to track steps and create in-toto link metadata
      Java
      •
      MIT License
      •12•5•5•2•Updated Jun 14, 2024Jun 14, 2024

    • in-toto-inspections

      Public
      A set of common in-toto inspections
      Python
      •
      MIT License
      •3•1•0•0•Updated May 27, 2024May 27, 2024

    • rebuilderd-website

      Public
      Arch Linux Rebuilderd status webpage (read-only mirror)
      JavaScript
      •
      MIT License
      •7•0•0•0•Updated Apr 11, 2024Apr 11, 2024

    • layout-web-tool

      Public archive
      A flask app that helps to create, modify and visualize in-toto layouts.
      Python
      •
      MIT License
      •8•3•31•2•Updated Apr 11, 2024Apr 11, 2024

    • in-toto-testing

      Public
      Python
      •0•3•1•0•Updated Feb 24, 2024Feb 24, 2024

    • Dockerfiles

      Public
      Dockerfile
      •1•6•0•1•Updated Jan 29, 2024Jan 29, 2024

    • windows-setup

      Public
      1•0•0•0•Updated May 8, 2023May 8, 2023

    • image-resources

      Public
      This repo contains image-related resources for in-toto
      2•1•0•0•Updated Jan 15, 2023Jan 15, 2023

    • github-action

      Public
      in-toto provenance github action
      JavaScript
      •0•8•5•0•Updated Oct 31, 2022Oct 31, 2022

    • ite-4-demo

      Public
      Python
      •2•1•0•0•Updated Oct 26, 2022Oct 26, 2022
    ProTip! When viewing an organization's repositories, you can use the props. filter to filter by custom property.