Witness is a pluggable framework digital attestation (github.com)

3 points by colek42 3y ago ↗ HN

1 comment

[ 3.2 ms ] story [ 14.1 ms ] thread

Witness is a pluggable framework for software supply chain risk management. It automates, normalizes, and verifies software artifact provenance.