in-toto protects software supply chains by recording signed metadata for each step and checking the result against a defined layout.The post in-toto – framework for software supply chain integrity appeared first on LinuxLinks.