In-toto: A framework to secure the integrity of software supply chains | Dark Hacker News