Witness is an open-source command-line tool that records how software gets built, signs that record, and checks it against a policy before the software ships. TestifySec built Witness and donated it to the in-toto ecosystem within the Cloud Native Computing…
Source: Help Net Security. Headline and summary © the original publisher; read the full story at the link.