https://shenxianpeng.dev/en/tags/witness/Recent content in Witness on Xianpeng ShenHugo -- gohugo.ioenxianpeng.shen@gmail.com (Xianpeng Shen)xianpeng.shen@gmail.com (Xianpeng Shen)Copyright © 2017–2026 Xianpeng Shen. All rights reserved.Sat, 02 Dec 2023 00:00:00 +0000https://shenxianpeng.dev/en/posts/2023/supply-chain-security/Sat, 02 Dec 2023 00:00:00 +0000xianpeng.shen@gmail.com (Xianpeng Shen)https://shenxianpeng.dev/en/posts/2023/supply-chain-security/This article introduces how to implement software supply chain security using SLSA and Witness for both GitHub and non-GitHub projects, enhancing the security of software development and deployment processes.https://shenxianpeng.dev/en/posts/2023/witness-and-slsa/Thu, 30 Nov 2023 00:00:00 +0000xianpeng.shen@gmail.com (Xianpeng Shen)https://shenxianpeng.dev/en/posts/2023/witness-and-slsa/This article introduces the concept and working mechanism of Witness, and how to use Witness to generate and verify the provenance of software artifacts, emphasizing its importance in improving software supply chain security.