in-toto-record
Create a signed link metadata file to provide evidence for supply chain steps. tldr-pages
On several platforms
Several platforms
Start the record (creates a preliminary link file)
in-toto-record start --step-name path/to/edit_file1 path/to/edit_file2 ... --signing-key path/to/key_file --materials .IdentifyStop the record (expects a preliminary link file)
in-toto-record stop --step-name path/to/edit_file1 path/to/edit_file2 ... --signing-key path/to/key_file --products .Identify