Witness: Open-source framework for verifying how your software was built

T2Covered by 1 source · first reported by Help Net Security at 26 Oct, 07:00 UTC

Witness is an open-source command-line tool that records how software gets built, signs that record, and checks it against a policy before the software ships. TestifySec built Witness and donated it to the in-toto ecosystem within the Cloud Native Computing Foundation, and an open community now…

devsecurity

Sources

• T2Witness: Open-source framework for verifying how your software was builtHelp Net Security26 Oct, 07:00