Witness is a pluggable framework digital attestation

github.com

3 pointscolek421 comment

Witness is a pluggable framework for software supply chain risk management. It automates, normalizes, and verifies software artifact provenance.