chalk

Chalk is a software provenance and attestation tool designed to offer a cryptographically verifiable chain of custody for production software with minimal configuration effort. It facilitates the automatic insertion of a tamperproof identifier into various software artifacts, allowing for easy integrity checks and correlation of provenance data. Notable features include support for build signature modes using Sigstore, integration with Docker’s SBOM tooling, and a continuous attestation model that aids in incident response, compliance, and tech stack visibility.