in-toto is a framework to secure the software supply chain.

Pure Go CLI tool to let agents rip safely

Friends of in-toto! A place to record integrations and adoptions of the in-toto specification.

Command line interface for Kusari

A specification for signing methods and formats used by Secure Systems Lab projects.

ORBIT: Open Resources for Baselines, Interoperability, and Tooling

Erlang Shell

A virtual monitor for screen sharing

Graphing SBOM's Fast.

Format agnostic SBOM tooling

Storage backends for protobom

A universal SBOM representation in protocol buffers

krata is a Xen control plane in Rust.

Integrate OPA Gatekeeper's new ExternalData feature with witness to determine whether the images are valid by verifying them against a witness policy

The Update Framework specification

Community Repository of The Update Framework (TUF)

TUF Augmentation Proposals (TAPs)

in-toto Enhancements

OpenSSF Scorecard - Security health metrics for Open Source

Cryptographic and general-purpose routines for Golang Secure Systems Lab projects at NYU

OpenSSF Education SIG

Lind: Secure Lightweight Adaptive Isolation

in-toto Attestation Framework