Command Line Tools
in-toto provides various command line tools that you can use to generate, consume, modify and verify in-toto metadata. Detailed usage instructions for each tool, along with examples, are provided below.
Supply Chain Verification
- in-toto-mock: mock in-toto-run
- in-toto-sign: sign/verify individual pieces of metadata
- in-toto-keygen: generate cryptographic keys