Witness is a pluggable framework for software supply chain risk management. It automates, normalizes, and verifies software artifact provenance.
Primary LanguageGoApache License 2.0Apache-2.0
No one’s star this repository yet.