A toolchain for software integrity protection including self-checksumming, control flow integrity, result checking, oblivious hashing and a sample program protected using Intel SGX

Standard defining graded, provable consistency among Spec, Code, and Tests

🕵️ Forensic analysis tool to detect fake GitHub stars. Analyze patterns, calculate trust scores, and expose star manipulation with statistical evidence.

in-toto is a CNCF graduated framework for securing the integrity of software supply chains. It provides a specification for generating and verifying metadata about each step in a software supply chain, from source code to deployment.