In-toto: A framework to secure the integrity of software supply chains

Part of

Standardizing Vulnerability And Advisory Frameworks