Hacker News new | ask | show | jobs
Witness is a pluggable framework digital attestation (github.com)
3 points by colek42 1233 days ago
1 comments

Witness is a pluggable framework for software supply chain risk management. It automates, normalizes, and verifies software artifact provenance.