in-toto / witness

Witness is a pluggable framework for software supply chain risk management. It automates, normalizes, and verifies software artifact provenance.

Date Created 2021-12-03 (2 years ago)

Commits 333 (last one 12 days ago)

Stargazers 405 (1 this week)

Watchers 25 (0 this week)

Forks 57

License apache-2.0

Ranking

RepositoryStats indexes 565,600 repositories, of these in-toto/witness is ranked #103,881 (82nd percentile) for total stargazers, and #87,572 for total watchers. Github reports the primary language for this repository as Go, for repositories using this language it is ranked #5,978/25,001.

in-toto/witness is also tagged with popular topics, for these it's ranked: security (#1,389/3907), security-tools (#371/1052)

Other Information

in-toto/witness has 6 open pull requests on Github, 268 pull requests have been merged over the lifetime of the repository.

Github issues are enabled, there are 63 open issues and 100 closed issues.

There have been 33 releases, the latest one was published on 2024-06-17 (3 months ago) with the name v0.6.0.

Homepage URL: https://witness.dev

All Topics

security attestation supply-chain verification security-tools

Star History

Github stargazers over time

Watcher History

Github watchers over time, collection started in '23

Recent Commit History

266 commits on the default branch (main) since jan '22

Yearly Commits

Commits to the default branch (main) per year

Issue History

Languages

The primary language is Go but there's also others...

updated: 2024-09-30 @ 09:11am, id: 434639382 / R_kgDOGegSFg