diff --git a/.prettierignore b/.prettierignore index 833ff04..be9db56 100644 --- a/.prettierignore +++ b/.prettierignore @@ -1,2 +1,6 @@ +# Temporary: ignore top-level *.md until docsy branch is merged into main +CONTRIBUTING.md +README.md + /themes /layouts \ No newline at end of file diff --git a/content/en/ecosystem/adopters/img/Datadog_logo.png b/content/en/ecosystem/adopters/img/datadog.png similarity index 100% rename from content/en/ecosystem/adopters/img/Datadog_logo.png rename to content/en/ecosystem/adopters/img/datadog.png diff --git a/content/en/ecosystem/adopters/img/OpenVEX_logo.png b/content/en/ecosystem/adopters/img/openvex.png similarity index 100% rename from content/en/ecosystem/adopters/img/OpenVEX_logo.png rename to content/en/ecosystem/adopters/img/openvex.png diff --git a/content/en/ecosystem/adopters/img/SLSA_logo.svg b/content/en/ecosystem/adopters/img/slsa.svg similarity index 100% rename from content/en/ecosystem/adopters/img/SLSA_logo.svg rename to content/en/ecosystem/adopters/img/slsa.svg diff --git a/content/en/ecosystem/adopters/img/Solarwinds_Logo.png b/content/en/ecosystem/adopters/img/solarwinds.png similarity index 100% rename from content/en/ecosystem/adopters/img/Solarwinds_Logo.png rename to content/en/ecosystem/adopters/img/solarwinds.png diff --git a/content/en/ecosystem/adopters/index.md b/content/en/ecosystem/adopters/index.md index a450be0..8544fb2 100644 --- a/content/en/ecosystem/adopters/index.md +++ b/content/en/ecosystem/adopters/index.md @@ -7,9 +7,9 @@ This section lists organizations or individuals who have adopted the project and are using it in their workflows or systems. These adopters contribute to the project's ecosystem and showcase its real-world usage across various domains. -| Organization | | Description | -| ------------ | ---------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | -| Datadog | | Datadog uses in-toto to secure its agent integrations as they move through the company's CI/CD system. | -| OpenVEX | | OpenVEX documents are designed to be self-sustaining, but the specification is designed to benefit from the in-toto attestation format completing VEX statements with data outside of the OpenVEX predicate. | -| SLSA | | Supply chain Levels for Software Artifacts, or SLSA, is a framework that provides a series of requirements and controls. | -| SolarWinds | | SolarWinds is an American company that provides information technology services and software to other companies and government agencies. | +| Organization | | Description | +| ------------ | ----------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | +| Datadog | | Datadog uses in-toto to secure its agent integrations as they move through the company's CI/CD system. | +| OpenVEX | | OpenVEX documents are designed to be self-sustaining, but the specification is designed to benefit from the in-toto attestation format completing VEX statements with data outside of the OpenVEX predicate. | +| SLSA | | Supply chain Levels for Software Artifacts, or SLSA, is a framework that provides a series of requirements and controls. | +| SolarWinds | | SolarWinds is an American company that provides information technology services and software to other companies and government agencies. | diff --git a/content/en/ecosystem/integreations/img/Gitlab_logo.png b/content/en/ecosystem/integreations/img/gitlab.png similarity index 100% rename from content/en/ecosystem/integreations/img/Gitlab_logo.png rename to content/en/ecosystem/integreations/img/gitlab.png diff --git a/content/en/ecosystem/integreations/img/Grafeas_logo.png b/content/en/ecosystem/integreations/img/grafeas.png similarity index 100% rename from content/en/ecosystem/integreations/img/Grafeas_logo.png rename to content/en/ecosystem/integreations/img/grafeas.png diff --git a/content/en/ecosystem/integreations/img/Guac_logo.png b/content/en/ecosystem/integreations/img/guac.png similarity index 100% rename from content/en/ecosystem/integreations/img/Guac_logo.png rename to content/en/ecosystem/integreations/img/guac.png diff --git a/content/en/ecosystem/integreations/img/Jenkins_logo.png b/content/en/ecosystem/integreations/img/jenkins.png similarity index 100% rename from content/en/ecosystem/integreations/img/Jenkins_logo.png rename to content/en/ecosystem/integreations/img/jenkins.png diff --git a/content/en/ecosystem/integreations/img/Sistore_logo.png b/content/en/ecosystem/integreations/img/sistore.png similarity index 100% rename from content/en/ecosystem/integreations/img/Sistore_logo.png rename to content/en/ecosystem/integreations/img/sistore.png diff --git a/content/en/ecosystem/integreations/img/Tekton_logo.png b/content/en/ecosystem/integreations/img/tekton.png similarity index 100% rename from content/en/ecosystem/integreations/img/Tekton_logo.png rename to content/en/ecosystem/integreations/img/tekton.png diff --git a/content/en/ecosystem/integreations/img/Testifysec_logo.svg b/content/en/ecosystem/integreations/img/testifysec.svg similarity index 100% rename from content/en/ecosystem/integreations/img/Testifysec_logo.svg rename to content/en/ecosystem/integreations/img/testifysec.svg diff --git a/content/en/ecosystem/integreations/index.md b/content/en/ecosystem/integreations/index.md index 4c48e5f..9cc92ab 100644 --- a/content/en/ecosystem/integreations/index.md +++ b/content/en/ecosystem/integreations/index.md @@ -8,14 +8,14 @@ the project to provide additional functionality, interoperability, or compatibility. These integrations enhance the project's capabilities and extend its usefulness across various ecosystems. -| Organization | | Description | -| ------------- | ---------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -| GitLab | | GitLab is a popular Git server that also provides CI/CD integrations. | -| Grafeas | | Grafeas is an open source metadata API that is used to store metadata relevant to software supply chains. Grafeas includes support for in-toto link metadata. | -| GUAC | | GUAC has the ability to ingest and parse SLSA and other in-toto ITE6 attestations (either wrapped in DSSE or standalone). | -| Hoppr | | Hoppr leverages the in-toto python package to generate in-toto layout files based on a hoppr transfer configuration. | -| Jenkins | | The in-toto team maintains a plugin for Jenkins that can be used to generate in-toto metadata pertaining to a particular build or "job". | -| rebuilderd | | Rebuilderd is a build system project part of Reproducible Builds. When the result of a rebuild is positive, i.e., the build process is found to be reproducible, rebuilderd generates an in-toto link recording this result. | -| Sigstore | | In-toto and Sigstore are complementary in their efforts, and Sigstore integrates in-toto in a number of ways. Sigstore's keyless signing can be used to sign in-toto metadata, as demonstrated by Cosign's SLSA Provenance generation. | -| Tekton Chains | | Tekton Chains is a component for Tekton that adds software supply chain security. Chains observes all "TaskRuns" or jobs that are executed, and generates an in-toto attestation. | -| TestifySec | | TestifySec is a software supply chain security company that has created two open source projects that leverage in-toto. Witness and Archivista. | +| Organization | | Description | +| ------------- | ----------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| GitLab | | GitLab is a popular Git server that also provides CI/CD integrations. | +| Grafeas | | Grafeas is an open source metadata API that is used to store metadata relevant to software supply chains. Grafeas includes support for in-toto link metadata. | +| GUAC | | GUAC has the ability to ingest and parse SLSA and other in-toto ITE6 attestations (either wrapped in DSSE or standalone). | +| Hoppr | | Hoppr leverages the in-toto python package to generate in-toto layout files based on a hoppr transfer configuration. | +| Jenkins | | The in-toto team maintains a plugin for Jenkins that can be used to generate in-toto metadata pertaining to a particular build or "job". | +| rebuilderd | | Rebuilderd is a build system project part of Reproducible Builds. When the result of a rebuild is positive, i.e., the build process is found to be reproducible, rebuilderd generates an in-toto link recording this result. | +| Sigstore | | In-toto and Sigstore are complementary in their efforts, and Sigstore integrates in-toto in a number of ways. Sigstore's keyless signing can be used to sign in-toto metadata, as demonstrated by Cosign's SLSA Provenance generation. | +| Tekton Chains | | Tekton Chains is a component for Tekton that adds software supply chain security. Chains observes all "TaskRuns" or jobs that are executed, and generates an in-toto attestation. | +| TestifySec | | TestifySec is a software supply chain security company that has created two open source projects that leverage in-toto. Witness and Archivista. |