witness

Witness is a dynamic CLI tool designed to create an audit trail for software throughout the entire software development lifecycle (SDLC) by adhering to the in-toto specification. It integrates with popular platforms such as GitHub, GitLab, AWS, and GCP to ensure that software production steps are verified, tampering is detected, and policies can be enforced using an embedded OPA Rego engine. Notable features include keyless signing support via Sigstore, timestamp authority integration, and compatibility with both containerized and non-containerized environments without requiring elevated privileges.