Witness is a pluggable framework for software supply chain risk management. It automates, normalizes, and verifies software artifact provenance.
- security-tools
- security
- attestation
- verification
47,133 repositories indexed
1–1 of 1 · Most stars
Witness is a pluggable framework for software supply chain risk management. It automates, normalizes, and verifies software artifact provenance.