witness — Witness is a pluggable framework for software supply chain risk management. It automates, normalizes, and verifies software artifact provenance.

Witness is a pluggable framework for software supply chain risk management. It automates, normalizes, and verifies software artifact provenance. · Sprache: Go · Topics: attestation, security, security-tools, supply-chain, verification · ⭐ 530 Stars