1 comment

[ 2.4 ms ] story [ 16.1 ms ] thread
Witness is a pluggable framework for software supply chain risk management. It automates, normalizes, and verifies software artifact provenance.