In-toto: A framework to secure the integrity of software supply chains
in-toto.io