A Go implementation of in-toto. in-toto is a framework to protect software supply chain integrity. - View it on GitHub