A CLI tool for creating secure by design/default source repos.

The Update Framework specification

in-toto Enhancements

Specification and other related documents.

in-toto is a framework to protect supply chain integrity.

Securing Alice's, Bob's and Carl's software supply chain using in-toto

Python reference implementation of The Update Framework (TUF)