CINXE.COM

<!doctype html><html itemscope itemtype=http://schema.org/WebPage lang=en class=no-js><head><meta name=generator content="Hugo 0.139.0"><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1,shrink-to-fit=no"><meta name=robots content="index, follow"><link rel="shortcut icon" href=/favicons/favicon.ico><link rel=apple-touch-icon href=/favicons/apple-touch-icon.png sizes=180x180><link rel=icon type=image/png href=/favicons/android-chrome-192x192.png sizes=192x192><link rel=icon type=image/png href=/favicons/android-chrome-512x512.png sizes=512x512><link rel=icon type=image/png href=/favicons/android-chrome-maskable-192x192.png sizes=192x192 purpose=maskable><link rel=icon type=image/png href=/favicons/android-chrome-maskable-512x512.png sizes=512x512><title>in-toto</title><meta name=description content="A framework to secure the integrity of software supply chains"><meta property="og:url" content="https://in-toto.io/"><meta property="og:site_name" content="in-toto"><meta property="og:title" content="in-toto"><meta property="og:description" content="A framework to secure the integrity of software supply chains"><meta property="og:locale" content="en_US"><meta property="og:type" content="website"><meta property="og:image" content="https://in-toto.io/featured-background.jpg"><meta itemprop=name content="in-toto"><meta itemprop=description content="A framework to secure the integrity of software supply chains"><meta itemprop=dateModified content="2024-12-16T18:31:01-05:00"><meta itemprop=wordCount content="101"><meta itemprop=image content="https://in-toto.io/featured-background.jpg"><meta name=twitter:card content="summary_large_image"><meta name=twitter:image content="https://in-toto.io/featured-background.jpg"><meta name=twitter:title content="in-toto"><meta name=twitter:description content="A framework to secure the integrity of software supply chains"><link rel=preload href=/scss/main.min.b3739a9e0e74a74eb0ce427799c433d3917490494f033647f83143f2e9f64b7c.css as=style integrity="sha256-s3Oang50p06wzkJ3mcQz05F0kElPAzZH+DFD8un2S3w=" crossorigin=anonymous><link href=/scss/main.min.b3739a9e0e74a74eb0ce427799c433d3917490494f033647f83143f2e9f64b7c.css rel=stylesheet integrity="sha256-s3Oang50p06wzkJ3mcQz05F0kElPAzZH+DFD8un2S3w=" crossorigin=anonymous><script src=https://code.jquery.com/jquery-3.7.1.min.js integrity="sha512-v2CJ7UaYy4JwqLDIrZUI/4hqeoQieOmAZNXBeQyjo21dadnwR+8ZaIJVT8EE2iyI61OV8e6M8PP2/4hpQINQ/g==" crossorigin=anonymous></script></head><body class=td-home><header><nav class="td-navbar js-navbar-scroll td-navbar-cover" data-bs-theme=dark><div class="container-fluid flex-column flex-md-row"><a class=navbar-brand href=/><span class="navbar-brand__logo navbar-logo"><svg role="img" viewBox="-3.29 29.96 366.08 298.83"><defs><style>.cls-2{fill:#ff3800}.cls-3{fill:#0089dd}</style></defs><path fill="#033" d="M310.09477 46.10888c-.288-.12246-.5759-.24165-.86379-.36134.25608.123.50869.25088.76242.37713z"/><path d="M157.253 157.752a37.86056 37.86056.0 017.01722 3.38756c8.25268 5.05721 15.24453 13.3115 20.17686 22.95071a50.719 50.719.0 009.933 12.963q1.47.97914 2.994 1.81762a36.86961 36.86961.0 005.74648 2.563 32.90416 32.90416.0 006.04873 1.47329 31.37417 31.37417.0 004.17473.31945h25e-5c15.83429-5.28309 14.62234-35.9031 4.96711-52.73659-12.69068-22.126-31.54581-35.88973-56.58259-40.67069-25.19521-4.81122-47.92518 1.15526-67.81217 17.31018-17.11146 13.898-34.9627 26.98231-50.98883 42.12176-10.12321 9.56192-19.69825 19.83575-26.18338 31.17011C5.17876 220.64.05063 237.55884 7.441 261.65924c0 0 9.04357 22.20909 18.27156 31.56914 8.49676 8.61625 16.39 16.46316 27.47281 21.17734 26.83477 11.41357 52.9554 9.76218 77.99664-5.45871a67.83044 67.83044.0 008.09847-5.89816c7.5868-6.32443 43.62172-31.89292 37.593-44.45475-2.944-6.13265-19.30243-21.19524-26.09414-21.17271-6.947.02327-34.95725 25.89073-43.06117 29.93724-16.57567 8.27465-36.14816 8.381-47.57417-5.9564-11.8134-14.8234-9.92369-36.18009 4.44468-48.18756 19.6324-16.40809 38.66377-33.58627 59.081-49.00754 9.90624-7.482 19.69441-9.533 28.64057-7.81188l13e-5-6e-5a33.36484 33.36484.0 014.94262 1.35681zM44.854 182.23579c-2.23738 2.07672-4.41782 4.19429-6.50729 6.36341l-.50746.03174q3.45873-3.25163 7.01475-6.39515c2.74681-2.54854 5.58013-5.03419 8.45517-7.4623l.25521-.00148q-4.41413 3.6648-8.71038 7.46378z" class="cls-2"/><path d="M38.34669 188.5992c2.08947-2.16912 4.26991-4.28669 6.50729-6.36341q-3.556 3.14349-7.01475 6.39515zm6.50731-6.36341q4.29639-3.79895 8.71038-7.46378l-.25521.00148c-2.87506 2.42811-5.70838 4.91376-8.45517 7.4623z" class="cls-2"/><path d="M352.55887 97.39378s-7.05237-20.54538-17.3512-31.5692c-7.454-7.97872-15.59728-14.91432-25.21427-19.69991-.25373-.12625-.50634-.25416-.76242-.37713-.79484-.38152-1.59761-.752-2.41634-1.10025-26.83478-11.41356-52.95529-9.76223-77.99677 5.45872a67.84285 67.84285.0 00-8.09847 5.89816c-7.58668 6.32436-43.6216 31.89292-37.593 44.45475 2.94409 6.13264 19.30242 21.19517 26.09414 21.17265 6.94716-.02327 34.95738-25.89067 43.06129-29.93718 16.57555-8.27472 36.14829-8.381 47.57417 5.95633 11.81328 14.82347 9.92381 36.1801-4.4448 48.18763-19.63228 16.408-38.66378 33.5862-59.081 49.00742-7.8565 5.934-15.63886 8.45059-22.98593 8.38091l-25e-5 6e-5a31.37419 31.37419.0 01-4.17473-.31951 32.90416 32.90416.0 01-6.04873-1.47329 36.86929 36.86929.0 01-5.74648-2.563q-1.525-.83888-2.994-1.81768a50.719 50.719.0 01-9.933-12.963c-4.93233-9.63921-11.92418-17.8935-20.17686-22.95071A37.86056 37.86056.0 00157.253 157.752a33.372 33.372.0 00-4.9426-1.35676h-13e-5a44.74414 44.74414.0 00-7.34063 53.62926c12.68907 22.126 30.541 34.81629 55.57759 39.59805l1.54637.254c23.67507 3.5278 45.114-2.61969 63.98968-17.95315 17.11159-13.898 34.96282-26.98231 50.989-42.12177 10.12321-9.56185 19.69824-19.83575 26.18338-31.1701 11.56572-20.21847 16.69372-37.13735 9.30321-61.23775z" class="cls-3"/><path d="M164.27024 161.13957A37.86056 37.86056.0 00157.253 157.752a37.86056 37.86056.0 017.01724 3.38757zm44.89902 41.76766a31.37419 31.37419.0 004.17473.31951l25e-5-6e-5h-24e-5a31.37417 31.37417.0 01-4.17474-.31945zM157.253 157.752a33.36484 33.36484.0 00-4.9426-1.35682l-13e-5 6e-5h13e-5a33.372 33.372.0 014.9426 1.35676zm37.12707 39.30131q1.46889.97887 2.994 1.81768a36.86929 36.86929.0 005.74648 2.563 36.86961 36.86961.0 01-5.74648-2.563q-1.52387-.83857-2.994-1.81768z" class="cls-3"/></svg></span><span class=navbar-brand__name>in-toto</span></a><div class="td-navbar-nav-scroll ms-md-auto" id=main_navbar><ul class=navbar-nav><li class=nav-item><a class=nav-link href=/about/><span>About</span></a></li><li class=nav-item><a class=nav-link href=/docs/><span>Docs</span></a></li><li class=nav-item><a class=nav-link href=/ecosystem/><span>Ecosystem</span></a></li><li class=nav-item><a class=nav-link href=/community/><span>Community</span></a></li><li class=nav-item><a class=nav-link href=/blog/><span>Blog</span></a></li><li class=nav-item><a class=nav-link href=/news/><span>News</span></a></li><li class="td-light-dark-menu nav-item dropdown"><svg class="d-none"><symbol id="check2" viewBox="0 0 16 16"><path d="M13.854 3.646a.5.5.0 010 .708l-7 7a.5.5.0 01-.708.0l-3.5-3.5a.5.5.0 11.708-.708L6.5 10.293l6.646-6.647a.5.5.0 01.708.0z"/></symbol><symbol id="circle-half" viewBox="0 0 16 16"><path d="M8 15A7 7 0 108 1v14zm0 1A8 8 0 118 0a8 8 0 010 16z"/></symbol><symbol id="moon-stars-fill" viewBox="0 0 16 16"><path d="M6 .278a.768.768.0 01.08.858 7.208 7.208.0 00-.878 3.46c0 4.021 3.278 7.277 7.318 7.277.527.0 1.04-.055 1.533-.16a.787.787.0 01.81.316.733.733.0 01-.031.893A8.349 8.349.0 018.344 16C3.734 16 0 12.286.0 7.71.0 4.266 2.114 1.312 5.124.06A.752.752.0 016 .278z"/><path d="M10.794 3.148a.217.217.0 01.412.0l.387 1.162c.173.518.579.924 1.097 1.097l1.162.387a.217.217.0 010 .412l-1.162.387A1.734 1.734.0 0011.593 7.69l-.387 1.162a.217.217.0 01-.412.0l-.387-1.162A1.734 1.734.0 009.31 6.593l-1.162-.387a.217.217.0 010-.412l1.162-.387a1.734 1.734.0 001.097-1.097l.387-1.162zM13.863.099a.145.145.0 01.274.0l.258.774c.115.346.386.617.732.732l.774.258a.145.145.0 010 .274l-.774.258a1.156 1.156.0 00-.732.732l-.258.774a.145.145.0 01-.274.0l-.258-.774a1.156 1.156.0 00-.732-.732l-.774-.258a.145.145.0 010-.274l.774-.258c.346-.115.617-.386.732-.732L13.863.1z"/></symbol><symbol id="sun-fill" viewBox="0 0 16 16"><path d="M8 12a4 4 0 100-8 4 4 0 000 8zM8 0a.5.5.0 01.5.5v2a.5.5.0 01-1 0v-2A.5.5.0 018 0zm0 13a.5.5.0 01.5.5v2a.5.5.0 01-1 0v-2A.5.5.0 018 13zm8-5a.5.5.0 01-.5.5h-2a.5.5.0 010-1h2a.5.5.0 01.5.5zM3 8a.5.5.0 01-.5.5h-2a.5.5.0 010-1h2A.5.5.0 013 8zm10.657-5.657a.5.5.0 010 .707l-1.414 1.415a.5.5.0 11-.707-.708l1.414-1.414a.5.5.0 01.707.0zm-9.193 9.193a.5.5.0 010 .707L3.05 13.657a.5.5.0 01-.707-.707l1.414-1.414a.5.5.0 01.707.0zm9.193 2.121a.5.5.0 01-.707.0l-1.414-1.414a.5.5.0 01.707-.707l1.414 1.414a.5.5.0 010 .707zM4.464 4.465a.5.5.0 01-.707.0L2.343 3.05a.5.5.0 11.707-.707l1.414 1.414a.5.5.0 010 .708z"/></symbol></svg> <button class="btn btn-link nav-link dropdown-toggle d-flex align-items-center" id=bd-theme type=button aria-expanded=false data-bs-toggle=dropdown data-bs-display=static aria-label="Toggle theme (auto)"> <svg class="bi my-1 theme-icon-active"><use href="#circle-half"/></svg></button><ul class="dropdown-menu dropdown-menu-end" aria-labelledby=bd-theme-text><li><button type=button class="dropdown-item d-flex align-items-center" data-bs-theme-value=light aria-pressed=false> <svg class="bi me-2 opacity-50"><use href="#sun-fill"/></svg> Light <svg class="bi ms-auto d-none"><use href="#check2"/></svg></button></li><li><button type=button class="dropdown-item d-flex align-items-center" data-bs-theme-value=dark aria-pressed=false> <svg class="bi me-2 opacity-50"><use href="#moon-stars-fill"/></svg> Dark <svg class="bi ms-auto d-none"><use href="#check2"/></svg></button></li><li><button type=button class="dropdown-item d-flex align-items-center active" data-bs-theme-value=auto aria-pressed=true> <svg class="bi me-2 opacity-50"><use href="#circle-half"/></svg> Auto <svg class="bi ms-auto d-none"><use href="#check2"/></svg></button></li></ul></li></ul></div><div class="d-none d-lg-block"></div></div></nav></header><div class="container-fluid td-default td-outer"><main role=main class=td-main><link rel=preload as=image href=/featured-background_hu18408291696259244493.jpg media="(max-width: 1200px)"><link rel=preload as=image href=/featured-background_hu16056391159218873026.jpg media="(min-width: 1200px)"><style>#td-cover-block-0{background-image:url(/featured-background_hu18408291696259244493.jpg)}@media only screen and (min-width:1200px){#td-cover-block-0{background-image:url(/featured-background_hu16056391159218873026.jpg)}}</style><section id=td-cover-block-0 class="row td-cover-block td-cover-block--height-max js-td-cover td-overlay td-overlay--dark -bg-dark"><div class=col-12><div class="container td-overlay__inner"><div class=text-center><div class="pt-3 lead"><img src=/img/in-toto-horizontal-white.svg alt=in-toto class=in-toto-logo><p class="display-6 mb-5">A framework to secure the integrity of software supply chains</p><p class="p-initial cta"><a class="btn btn-primary" href=docs/what-is-in-toto/>Learn More</a> <a class="btn btn-secondary" href=docs/getting-started/>Get started</a> <a class="btn btn-primary" href=https://github.com/in-toto/demo>Try the demo</a></p></div></div></div></div></section><div><a id=td-block-1 class=td-offset-anchor></a></div><section class="row td-box td-box--primary position-relative td-box--height-auto"><div class=col-12><div class="container text-center td-arrow-down"><div class="h4 mb-0"><p>in-toto is designed to ensure the integrity of a software product from initiation to end-user installation. It does so by making it transparent to the user what steps were performed, by whom and in what order.</p></div></div></div></section><div><a id=td-block-2 class=td-offset-anchor></a></div><section class="row td-box td-box--dark td-box--height-auto"><div class=col><div class=row><div class="col-lg-4 mb-5 mb-lg-0 text-center"><div class="mb-4 h1"><i class="fas fa-solid fa-book"></i></div><h4 class=h3>Open, extensible standard</h4><div class=mb-0><p>An open metadata standard that you can implement in your software’s supply chain.</p></div><p><a href=/docs/specs/>Read more</a></p></div><div class="col-lg-4 mb-5 mb-lg-0 text-center"><div class="mb-4 h1"><i class="fas fa-solid fa-handshake-simple"></i></div><h4 class=h3>Adoptions and Integrations</h4><div class=mb-0><p>Explore integrations and adopters of in-toto.</p></div><p><a href=https://github.com/in-toto/friends>Read more</a></p></div><div class="col-lg-4 mb-5 mb-lg-0 text-center"><div class="mb-4 h1"><i class="fas fa-solid fa-gear"></i></div><h4 class=h3>Extensive tooling</h4><div class=mb-0><p>Use in-toto today by through Apache-licensed libraries and tools.</p></div><p><a href=https://github.com/in-toto>Read more</a></p></div></div></div></section><div><a id=td-block-3 class=td-offset-anchor></a></div><section class="row td-box td-box--secondary td-box--height-auto"><div class=col><div class=cncf><p><strong>in-toto is a <a href=https://cncf.io target=_blank rel=noopener class=external-link>CNCF</a> <a href=https://www.cncf.io/projects/ target=_blank rel=noopener class=external-link>incubating</a> project</strong>.<br></p><p><a href=https://cncf.io target=_blank rel=noopener class=external-link><img alt="CNCF logo" src=/img/cncf-white.svg></a></p></div></div></section></main><footer class="td-footer row d-print-none"><div class=container-fluid><div class="row mx-md-2"><div class="td-footer__left col-6 col-sm-4 order-sm-1"><ul class=td-footer__links-list><li class=td-footer__links-item data-bs-toggle=tooltip title="Mailing list" aria-label="Mailing list"><a target=_blank rel=noopener href=https://groups.google.com/g/in-toto-public aria-label="Mailing list"><i class="fa-solid fa-user-group"></i></a></li><li class=td-footer__links-item data-bs-toggle=tooltip title=Slack aria-label=Slack><a target=_blank rel=noopener href=https://slack.cncf.io aria-label=Slack><i class="fa-brands fa-slack"></i></a></li><li class=td-footer__links-item data-bs-toggle=tooltip title=Email aria-label=Email><a target=_blank rel=noopener href=mailto:in-toto-dev@googlegroups.com aria-label=Email><i class="fa-solid fa-envelope"></i></a></li><li class=td-footer__links-item data-bs-toggle=tooltip title=IRC aria-label=IRC><a target=_blank rel=noopener href=https://web.libera.chat/#in-toto aria-label=IRC><i class="fa-solid fa-comments"></i></a></li></ul></div><div class="td-footer__right col-6 col-sm-4 order-sm-3"><ul class=td-footer__links-list><li class=td-footer__links-item data-bs-toggle=tooltip title="Reporting issues" aria-label="Reporting issues"><a target=_blank rel=noopener href=/docs/security aria-label="Reporting issues"><i class="fa-solid fa-bug"></i></a></li><li class=td-footer__links-item data-bs-toggle=tooltip title="Community repository" aria-label="Community repository"><a target=_blank rel=noopener href=https://github.com/in-toto/community aria-label="Community repository"><i class="fa-solid fa-users"></i></a></li><li class=td-footer__links-item data-bs-toggle=tooltip title="Website repository" aria-label="Website repository"><a target=_blank rel=noopener href=https://github.com/in-toto/in-toto.io aria-label="Website repository"><i class="fa-brands fa-github"></i></a></li></ul></div><div class="td-footer__center col-12 col-sm-4 py-2 order-sm-2"><span class=td-footer__copyright>© 2020–2024 <span class=td-footer__authors>in-toto Authors<br><a href=https://creativecommons.org/licenses/by/4.0 target=_blank rel=noopener class=external-link>CC BY 4.0</a> | <a href=https://www.linuxfoundation.org/legal/trademark-usage target=_blank rel=noopener class=external-link>Trademarks</a> | <a href=/about/#funding>Funding</a> |</span></span><span class=td-footer__all_rights_reserved>All Rights Reserved</span><span class=ms-2><a href=https://www.linuxfoundation.org/legal/privacy-policy target=_blank rel=noopener>Privacy Policy</a></span></div></div></div></footer></div><script src=/js/main.min.ec72b177672f5fcf099e2fd40578755c6aa5c44b3cf20fdfd9ea1fb0dbff991a.js integrity="sha256-7HKxd2cvX88Jni/UBXh1XGqlxEs88g/f2eofsNv/mRo=" crossorigin=anonymous></script><script defer src=/js/click-to-copy.min.73478a7d4807698aed7e355eb23f9890ca18fea3158604c8471746d046702bad.js integrity="sha256-c0eKfUgHaYrtfjVesj+YkMoY/qMVhgTIRxdG0EZwK60=" crossorigin=anonymous></script><script src=/js/tabpane-persist.js></script></body></html>