- ITE-1: in-toto Enhancement Format
- ITE-3: Real-world example of combining TUF and in-toto for packaging Datadog Agent integrations
- ITE-4: Generic URI Schemes for in-toto
- ITE-2: A general overview of combining TUF and in-toto to build compromise-resilient CI/CD
- ITE-5: Replace signature envelope with DSSE
- ITE-6: Generalized link format
This project is developed under the Apache license.
This project is managed by Prof. Santiago Torres-Arias at Purdue University. It is worked on by many folks in academia and industry, including members of the Secure Systems Lab at NYU, and the NJIT Cybersecurity Research Center.
This research was supported by the Defense Advanced Research Projects Agency (DARPA) and the Air Force Research Laboratory (AFRL). Any opinions, findings, and conclusions or recommendations expressed in this material are those of the authors and do not necessarily reflect the views of DARPA and AFRL. The United States Government is authorized to reproduce and distribute reprints notwithstanding any copyright notice herein.