[maurys]

I've heard of in-toto at work and it's still very new and shiny. Even the article mentions early adopters adopting it in 2018.

I'm not surprised multiple vendors haven't adopted the system yet.

2.2 million on a research initiative and not immediately adopting it until it's proven and widespread seems perfectly reasonable to me.

The (abridged) title made it sound worse IMO.

[trishankdatadog]

Yes, we (Datadog Agent integrations) were one of the early adopters mentioned, please see our blog post [1].

Also, really, the TLDR should be just use TUF + in-toto already.

[1] https://www.datadoghq.com/blog/engineering/secure-publicatio...