OpenSSF publication

in-toto Attestation

The signed-envelope format that SLSA Provenance and other supply-chain attestations ship in. Defines the predicate/statement structure and signature wrapper used by every conforming attestation.

Read the publication