GitHub repository: ChaosInTheCRD/witness
Primary language: Go
Description: Witness is a pluggable framework for software supply chain risk management.  It automates, normalizes, and verifies software artifact provenance.