Come learn all the ways in-toto is used within the CNCF ecosystem. If you're actively building software using cloud native tools and meant for deployment on Kubernetes, there are many ways in which in-toto attestations can be useful.
In-toto is a framework that guarantees the security and integrity of the software supply chain. It verifies that each task within the chain is completed as intended, only by authorized individuals, and that the final product remains unaltered during transportation.