GitHub repository: ossf/wg-supply-chain-integrity
Description: Our objective is to enable open source maintainers, contributors and end-users to understand and make decisions on the provenance of the code they maintain, produce and use.