In-toto: A framework to secure the integrity of software supply chains

Part of

Standardizing Cybersecurity Vulnerability And Advisory Frameworks