In-toto: A framework to secure the integrity of software supply chains
2 months ago
- In-toto ensures software product integrity from initiation to end-user installation.
- It provides transparency about the steps performed, by whom, and in what order.
- It is an open, extensible metadata standard for implementation in software supply chains.