-
The repositories names for the in-toto python implementation (`in-toto`) and for the in-toto specification (`docs`) are ambiguous and/or misleading. They can be easily mistaken for a project "landing …
-
#### What would you like to be added:
We should support reading and writing SBOMs in in-toto attestations. `bom` should be able to read SBOMs wrapped in [in-toto attestations](https://github.com/i…
-
A few commands used in the project are now using older deprecated switches. Assumedly due to the recently updated in-toto version being used.
`in-toto-run` with `--key` is now `--signing-key`
`in-…
-
**Describe the issue**
We're using Checkov and interested in a different output format. We'd like the data to follow the in-toto Attestation Specification. In-toto has a vulnerability predicate typ…
-
Hi,
Connections with both targets on the same container is not displayed as expected with elk engine. In the following example the connection `toto.parentId -> toto.id` should start from `parentId` p…
-
In addition to existing formats, it'd be handy to have scorecards result emitted as an in-toto attestation. The attestation framework is described here: https://github.com/in-toto/attestation.
## W…
-
Hello, I have hosted PrivacyIDEA on an LXD container. The Flask application is managed via Gunicorn and Systemd manages the service :
```
[Unit]
Description=PrivacyIDEA Authentication System
Aft…
-
provenance schema link returns 404.
https://github.com/in-toto/attestation/blob/main/protos/in_toto_attestation/predicates/provenance/v1/provenance.proto#L1
![image](https://github.com/user-attachme…
-
Ref: https://github.com/PradyumnaKrishna/in-toto-testing
@PradyumnaKrishna has written some cross-implementation tests (and in the process discovered some issues). The next step is to have this rev…
-
### Apache Airflow version
2.10.0
### What happened?
when I vizualize the XCOM in airflow UI , the keys are formatted in CamelCase
![image](https://github.com/user-attachments/assets/f87a9…