← All tools

witness

https://witness.dev

Open Source

Description

Witness is a pluggable framework for software supply chain risk management. It automates, normalizes, and verifies software artifact provenance.

Keywords

attestation security security-tools supply-chain verification go

Screenshots

Example Usage

bash <(curl -s https://raw.githubusercontent.com/in-toto/witness/main/install-witness.sh)