in-toto / witness

Witness is a pluggable framework for software supply chain risk management. It automates, normalizes, and verifies software artifact provenance.
https://witness.dev
Apache License 2.0
416 stars 60 forks source link

Migrating to the use of in-toto/go-witness module #331

Closed ChaosInTheCRD closed 11 months ago

ChaosInTheCRD commented 11 months ago

to be merged after https://github.com/in-toto/witness/pull/328

ChaosInTheCRD commented 11 months ago

This branch uses a non release version of go-witness - wait for a release of go-witness before merging this PR