Hacker News new | ask | show | jobs
by colek42 1233 days ago
Witness is a pluggable framework for software supply chain risk management. It automates, normalizes, and verifies software artifact provenance.