LINKED LIST [txt mode] ▸ in-toto

home explore | log in

in-toto

in-toto.io · first added by @afreshcup · 2026-09-30 · 1 upvotes

log in to save, upvote or flag this.

─── In 0 lists ─────────────────────────────────────────

(not in any lists yet)

* Secure at every step: What is software supply chain security and why does it matter? (from the discussion)

* Small world with high risks: a study of security threats in the npm ecosystem (from the discussion)

─── Discussions ────────────────────────────────────────

* In-toto: A framework to secure the integrity of software supply chains

69 pts · 17 comments · node

─── From the discussion ────────────────────────────────

* The Update Framework Specification

theupdateframework.github.io · node

* Signing is for the bad days

nesbitt.io · node

* specification/in-toto-spec.md at v1.0 · in-toto/specification

github.com · node