Witness: Open-source framework for verifying how your software was built
Comments
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Summary
Witness is an open-source command-line tool, donated by TestifySec to the in-toto ecosystem within the Cloud Native Computing Foundation, that records how software is built, signs the record, and checks it against a policy before release.