All tags
Catalogue tag

#in-toto

Every repository in the public record carrying this tag — from its GitHub topics or the keywords its package registries publish. Health is measured under the same versioned methodology as the rest of the record.

5 records
Tagged “in-toto”Ranked by health index
Go
98Exceptionalhealth index
chainloop-dev/chainloop
SDLC evidence store and policy engine for your Software Supply Chain attestations, SBOMs, VEX, SARIF, QA reports, and more
Go★ 570Jul 16, 2026
Apache-2.0Jul 16, 2026 · metrics 2.10.0
PyPI · crates.io · Go +1
92Excellenthealth index
in-toto/attestation
in-toto Attestation Framework
Rust★ 369↓ 44.4K/moAug 29, 2026
Custom licenseAug 29, 2026 · metrics 2.10.0
Go
73Goodhealth index
in-toto/in-toto-golang
A Go implementation of in-toto. in-toto is a framework to protect software supply chain integrity.
Go★ 151Aug 29, 2026
Custom licenseAug 29, 2026 · metrics 2.10.0
Packagist
59Moderatehealth index
k2gl/dsse
Sign and verify DSSE (Dead Simple Signing Envelope) payloads in PHP.
PHP★ 0↓ 2,480/moJul 26, 2026
MITJul 26, 2026 · metrics 2.10.0
crates.io
56Moderatehealth index
greenticai/greentic-update
Greentic update platform foundation: signed update plans, installed-artifact catalogue/diff, staging, and airgap envelopes.
Rust★ 0↓ 2,181/moAug 11, 2026
MITAug 11, 2026 · metrics 2.10.0