in-toto-record

Create a signed link metadata file to provide evidence for supply chain steps.

TLDR

Start the record (creates a preliminary link file)

$ in-toto-record start -n [edit-files] -k [path/to/key_file] -m [.]
copy


Stop the record (expects a preliminary link file)
$ in-toto-record stop -n [edit-files] -k [path/to/key_file] -p [.]
copy

Copied to clipboard