Hacker GitHub

← All repos

in-toto/attestation

View on GitHub ↗ ★ 388 Rust

in-toto Attestation Framework

5 mentions on Hacker News by 5 people: 0 stories, 5 comments · first 2022-09-20 · latest 2026-01-04

Mentions per year 5 mentions · busiest year 2023 (2)
20082026
AllStoriesComments NewestTopOldest
  1. This does seem wildly overcomplicated. Here is the attestation system they use: https://github.com/in-toto/attestation/blob/main/spec/README... Why not Just(TM) enforce a reproducible build process? That brings some of its own challenges,…
    comment by jcgl · 2026-01-04 · in PyPI in 2025: A Year in Review
  2. …uses the in-toto Attestation Framework for the attestations it accepts. [ in-toto/attestation spec: https://github.com/in-toto/attestation/blob/main/spec/README... ] > Currently, PyPI allows the following attestation predicates: > SLSA…
    comment by westurner · 2025-06-11 · in Publish a Python Wheel to GCP Artifact Registry with Poetry
  3. …attestations [0] for SLSA's upcoming source track [1] could be very interesting as well. [0] https://github.com/in-toto/attestation [1] https://github.com/slsa-framework/slsa/issues/956
    comment by adityasaky · 2023-10-25 · in Gittuf – a security layer for Git
  4. …[3] https://github.com/secure-systems-lab/dsse [4] https://www.rfc-editor.org/rfc/rfc8152 [5] https://github.com/in-toto/attestation
    comment by sublimefire · 2023-04-19 · in NPM Provenance Public Beta
  5. …dpc for. The biggest blocker for starting this project is the human review spec settling in in-toto https://github.com/in-toto/attestation/issues/77 Some relevant discussion here too: https://gist.github.com/lrvick/d4b87c600cc074dfcd00a01ee…
    comment by lrvick · 2022-09-20 · in There is no “software supply chain”