CI/lock — Trusted telemetry for every checkpoint between commit and production
cilock.dev
CI/lock is an evidence collector for software development lifecycles, offering SLSA-aligned in-toto attestations and continuous compliance tracking.
CI/lock provides a focused solution for collecting verifiable attestations across the software development pipeline. Its alignment with SLSA and compatibility with Witness makes it a practical resource for teams addressing supply chain security. The project site presents technical documentation and a clear value proposition for integrating evidence collection into CI/CD workflows.
Checked with Google Web Risk · 2 days ago
- language
- EN
- here since
- July 2026