We've published a new 🔴🟡🟢 AMPEL case study on the SLSA Blog!

We are proud to announce the second beta of 🔴🟡🟢 AMPEL, our software supply chain security policy engine! 🥳 This release includes the final feature patches that were pending before the final release, plus a ton of improvements and bug fixes gathered during the beta.1 test github.com/carabiner-de...

v0.2.0 of our signer library is out! This release ships with full support for DSSE signing and verification. github.com/carabiner-de...

We've released v0.3.0 of bnd, our in-toto attestations multitool 🎉 This release integrates 🔴🟡🟢 AMPEL's collectors, effectively turning bnd into a CLI to read and write attestations from the supported repositories. Get it now: github.com/carabiner-de...