apt transport method for in-toto supply chain verification


apt-transport-in-toto provides a custom transport method for apt that fetches and verifies signed build information from autonomous rebuilders upon package installation.

It uses the supply chain security framework in-toto for its verification protocol, to i.a. define trust relationships and exchange and verify build information.

apt-transport-in-toto is developed at the Secure Systems Lab of NYU.

Upload more screenshots

Please help extend the collection of screenshots. Just make a screenshot and upload it here. You don't need to register or anything.

Upload a screenshot

Hint: upload an image here from your clipboard with Ctrl-V



Install this software package

If the package is available for the distribution you are currently using on your computer then install the software by clicking on…

Install apt-transport-in-toto