IN-TOTO-GOLANG(1)

💖 NAME 💖

okay so this is in-toto-golang — and its whole entire job is to secure the integrity of software supply chains. that's the mission statement, that's the vibe, that's the lore. 🔐✨

✨ DESCRIPTION ✨

in-toto-golang is a framework to secure the integrity of software supply chains, and the official home base online is https://in-toto.io/ 🦋 go say hi.

like, literally, supply chain security is the moment. this is the tool. periodt. 💅

🎀 Usage 🎀

in-toto [command]

👑 Available Commands 👑

here's the whole squad, each one clocking in for a specific job:

• completion — Generate completion script. tab-completion, so you can stop typing every flag by hand like it's a punishment. ✨
• gendoc — Generate in-toto-golang's help docs. docs that generate docs, highkey meta, obsessed.
• help — Help about any command. the "wait, what does this even do again" button 🫶
• key — Key management commands. your keys are literally your whole personality here, protect them with your life 💜
• match-products — Check if local artifacts match products in passed link record. a lil vibe check for your artifacts 🌸
• link — Creates a signed link metadata file in two steps, in order to provide evidence for supply chain steps that cannot be carried out by a single command. receipts, in two parts, because some steps are just built different 📸
• run — Executes the passed command and records paths and hashes of 'materials'. it runs your thing and keeps the receipts, iconic behavior fr fr.
• sign — Provides command line interface to sign in-toto link or layout metadata. signature time, pen out ✍️
• verify — Verify that the software supply chain of the delivered product. (yeah bestie, the original description genuinely trails off right there — i'm reporting it, not embellishing it 🙈)

ngl the original manpage smashes match-products and link across some jumbled wrapped columns, so it renders kind of cursed 💀 — the two descriptions above are the exact same words, just un-smooshed so you can actually read them.

🚩 Flags 🚩

• -h, --help — help for in-toto.

Use "in-toto [command] --help" for more information about a command. (iykyk — drill into any command for the deets 🔥)

and that's the whole page, no notes 👑

this was in-toto-golang 0.11.0+ds-1, dated July 2026 — love that for us. go secure some supply chains, bestie, you're gonna slay 💖🎀🦋