Repositories list

• friends

  Public

  in-toto/friends’s past year of commit activity
  Friends of in-toto! A place to record integrations and adoptions of the in-toto specification.

  Python

  •2424 forks in in-toto/friends•2222 stars in in-toto/friends•55 issues in in-toto/friends•88 pull requests in in-toto/friends•Updated Oct 30, 2026Oct 30, 2026

• attestation

  Public
  in-toto Attestation Framework

  attestationsoftware-supply-chain-security

  attestationsoftware-supply-chain-security

  Rust

  •

  Other

  •132132 forks in in-toto/attestation•389389 stars in in-toto/attestation•6262 issues in in-toto/attestation•2424 pull requests in in-toto/attestation•Updated Oct 28, 2026Oct 28, 2026

• policy-framework

  Public

  in-toto/policy-framework’s past year of commit activity
  Apache License 2.0

  •00 forks in in-toto/policy-framework•11 star in in-toto/policy-framework•00 issues in in-toto/policy-framework•00 pull requests in in-toto/policy-framework•Updated Oct 26, 2026Oct 26, 2026

• archivista

  Public

  in-toto/archivista’s past year of commit activity
  Archivista is a graph and storage service for in-toto attestations. Archivista enables the discovery and retrieval of attestations for software artifacts.

  Go

  •

  Apache License 2.0

  •3838 forks in in-toto/archivista•120120 stars in in-toto/archivista•2929 issues in in-toto/archivista•1515 pull requests in in-toto/archivista•Updated Oct 26, 2026Oct 26, 2026

• witness

  Public

  in-toto/witness’s past year of commit activity
  Witness is a pluggable framework for software supply chain risk management. It automates, normalizes, and verifies software artifact provenance.

  securitysupply-chainverification+ 2

  securitysupply-chainverificationattestationsecurity-tools

  Go

  •

  Apache License 2.0

  •8686 forks in in-toto/witness•614614 stars in in-toto/witness•6868 issues in in-toto/witness•77 pull requests in in-toto/witness•Updated Oct 26, 2026Oct 26, 2026

• go-witness

  Public

  in-toto/go-witness’s past year of commit activity
  Go implementation of witness

  Go

  •

  Apache License 2.0

  •4040 forks in in-toto/go-witness•5454 stars in in-toto/go-witness•3030 issues in in-toto/go-witness•2121 pull requests in in-toto/go-witness•Updated Oct 13, 2026Oct 13, 2026

• attestation-verifier

  Public

  in-toto/attestation-verifier’s past year of commit activity
  Prototype in-toto attestation verifier based on ITE-10 and ITE-11 layouts

  in-toto

  in-toto

  Go

  •

  Other

  •88 forks in in-toto/attestation-verifier•1919 stars in in-toto/attestation-verifier•55 issues in in-toto/attestation-verifier•1212 pull requests in in-toto/attestation-verifier•Updated Sep 11, 2026Sep 11, 2026

• in-toto-golang

  Public

  in-toto/in-toto-golang’s past year of commit activity
  A Go implementation of in-toto. in-toto is a framework to protect software supply chain integrity.

  securitysoftware-supply-chainin-toto

  securitysoftware-supply-chainin-toto

  Go

  •

  Other

  •5858 forks in in-toto/in-toto-golang•152152 stars in in-toto/in-toto-golang•2929 issues in in-toto/in-toto-golang•1010 pull requests in in-toto/in-toto-golang•Updated Sep 10, 2026Sep 10, 2026

• community

  Public

  in-toto/community’s past year of commit activity
  in-toto is a framework to secure the software supply chain.

  cncfsoftware-supply-chainin-toto+ 1

  cncfsoftware-supply-chainin-totosoftware-supply-chain-security

  1111 forks in in-toto/community•7474 stars in in-toto/community•1111 issues in in-toto/community•22 pull requests in in-toto/community•Updated Sep 3, 2026Sep 3, 2026

• scai-demos

  Public
  Software Supply Chain Attribute Integrity (SCAI) Demos and CLI tools

  clidemosattestations+ 1

  clidemosattestationssoftware-supply-chain-security

  Go

  •

  Apache License 2.0

  •55 forks in in-toto/scai-demos•1919 stars in in-toto/scai-demos•11 issue in in-toto/scai-demos•88 pull requests in in-toto/scai-demos•Updated Sep 2, 2026Sep 2, 2026

• .project

  Public
  Project metadata for in-toto - CNCF .project automation

  00 forks in in-toto/.project•00 stars in in-toto/.project•11 issue in in-toto/.project•00 pull requests in in-toto/.project•Updated Aug 31, 2026Aug 31, 2026

• in-toto

  Public
  in-toto is a framework to protect supply chain integrity.

  securitysupply-chainnew-york-university+ 1

  securitysupply-chainnew-york-universitysecure-systems-lab

  Python

  •

  Other

  •169169 forks in in-toto/in-toto•1.1k1.1k stars in in-toto/in-toto•4343 issues in in-toto/in-toto•1818 pull requests in in-toto/in-toto•Updated Aug 27, 2026Aug 27, 2026

• in-toto-rs

  Public
  A rust implementation of in-toto

  securitysoftware-supply-chain

  securitysoftware-supply-chain

  Rust

  •

  MIT License

  •1414 forks in in-toto/in-toto-rs•3535 stars in in-toto/in-toto-rs•66 issues in in-toto/in-toto-rs•55 pull requests in in-toto/in-toto-rs•Updated Jul 28, 2026Jul 28, 2026

• specification

  Public
  Specification and other related documents.

  Python

  •

  MIT License

  •2727 forks in in-toto/specification•5555 stars in in-toto/specification•77 issues in in-toto/specification•22 pull requests in in-toto/specification•Updated Jul 24, 2026Jul 24, 2026

• in-toto.io

  Public
  The in-toto website and documentation

  SCSS

  •2424 forks in in-toto/in-toto.io•1717 stars in in-toto/in-toto.io•1515 issues in in-toto/in-toto.io•00 pull requests in in-toto/in-toto.io•Updated May 27, 2026May 27, 2026

• demo

  Public
  Securing Alice's, Bob's and Carl's software supply chain using in-toto

  Python

  •4343 forks in in-toto/demo•108108 stars in in-toto/demo•33 issues in in-toto/demo•44 pull requests in in-toto/demo•Updated Feb 11, 2026Feb 11, 2026

• helm-charts

  Public
  in-toto helm charts

  Smarty

  •11 fork in in-toto/helm-charts•11 star in in-toto/helm-charts•11 issue in in-toto/helm-charts•00 pull requests in in-toto/helm-charts•Updated Sep 2, 2025Sep 2, 2025

• ITE

  Public
  in-toto Enhancements

  Other

  •2323 forks in in-toto/ITE•2222 stars in in-toto/ITE•66 issues in in-toto/ITE•55 pull requests in in-toto/ITE•Updated Feb 17, 2025Feb 17, 2025

• in-toto.github.io

  Public archive
  In-toto's website.

  HTML

  •

  MIT License

  •88 forks in in-toto/in-toto.github.io•11 star in in-toto/in-toto.github.io•66 issues in in-toto/in-toto.github.io•00 pull requests in in-toto/in-toto.github.io•Updated Dec 6, 2024Dec 6, 2024

• apt-transport-in-toto

  Public
  in-toto transport for apt

  Python

  •

  Other

  •66 forks in in-toto/apt-transport-in-toto•99 stars in in-toto/apt-transport-in-toto•99 issues in in-toto/apt-transport-in-toto•11 pull request in in-toto/apt-transport-in-toto•Updated Sep 25, 2024Sep 25, 2024

• in-toto-java

  Public
  A Java implementation of in-toto runlib

  Java

  •

  MIT License

  •1212 forks in in-toto/in-toto-java•1111 stars in in-toto/in-toto-java•44 issues in in-toto/in-toto-java•1616 pull requests in in-toto/in-toto-java•Updated Jul 23, 2024Jul 23, 2024

• ite-4-demo-test-repo

  Public
  Python

  •11 fork in in-toto/ite-4-demo-test-repo•00 stars in in-toto/ite-4-demo-test-repo•00 issues in in-toto/ite-4-demo-test-repo•00 pull requests in in-toto/ite-4-demo-test-repo•Updated Jul 17, 2024Jul 17, 2024

• in-toto-jenkins-plugin

  Public
  A Jenkins plugin to track steps and create in-toto link metadata

  Java

  •

  MIT License

  •1212 forks in in-toto/in-toto-jenkins-plugin•55 stars in in-toto/in-toto-jenkins-plugin•55 issues in in-toto/in-toto-jenkins-plugin•22 pull requests in in-toto/in-toto-jenkins-plugin•Updated Jun 14, 2024Jun 14, 2024

• in-toto-inspections

  Public
  A set of common in-toto inspections

  Python

  •

  MIT License

  •33 forks in in-toto/in-toto-inspections•11 star in in-toto/in-toto-inspections•00 issues in in-toto/in-toto-inspections•00 pull requests in in-toto/in-toto-inspections•Updated May 27, 2024May 27, 2024

• rebuilderd-website

  Public
  Arch Linux Rebuilderd status webpage (read-only mirror)

  JavaScript

  •

  MIT License

  •66 forks in in-toto/rebuilderd-website•00 stars in in-toto/rebuilderd-website•00 issues in in-toto/rebuilderd-website•00 pull requests in in-toto/rebuilderd-website•Updated Apr 11, 2024Apr 11, 2024

• layout-web-tool

  Public archive
  A flask app that helps to create, modify and visualize in-toto layouts.

  Python

  •

  MIT License

  •88 forks in in-toto/layout-web-tool•33 stars in in-toto/layout-web-tool•3131 issues in in-toto/layout-web-tool•22 pull requests in in-toto/layout-web-tool•Updated Apr 11, 2024Apr 11, 2024

• in-toto-testing

  Public
  Python

  •00 forks in in-toto/in-toto-testing•33 stars in in-toto/in-toto-testing•11 issue in in-toto/in-toto-testing•00 pull requests in in-toto/in-toto-testing•Updated Feb 24, 2024Feb 24, 2024

• Dockerfiles

  Public
  Dockerfile

  •11 fork in in-toto/Dockerfiles•66 stars in in-toto/Dockerfiles•00 issues in in-toto/Dockerfiles•11 pull request in in-toto/Dockerfiles•Updated Jan 29, 2024Jan 29, 2024

• windows-setup

  Public
  11 fork in in-toto/windows-setup•00 stars in in-toto/windows-setup•00 issues in in-toto/windows-setup•00 pull requests in in-toto/windows-setup•Updated May 8, 2023May 8, 2023

• image-resources

  Public
  This repo contains image-related resources for in-toto

  22 forks in in-toto/image-resources•11 star in in-toto/image-resources•00 issues in in-toto/image-resources•00 pull requests in in-toto/image-resources•Updated Jan 15, 2023Jan 15, 2023