Issues

• New predicate proposal: AI code-generation provenance with per-range human/AI attribution

  in-toto/attestation#604 · Filter by author csheargm opened on Sep 30, 2026
  7

• Proposal: Agentic process evidence

  in-toto/attestation#600 · Filter by author carmithersh opened on Sep 29, 2026

• Proposal: capability predicate (what an artifact may touch)

  in-toto/attestation#594 · Filter by author gowrishankar-infra opened on Sep 21, 2026
  1

• New predicate proposal: eval-result (AI/ML evaluation results)

  in-toto/attestation#565 · Filter by author b7n0de opened on Jul 3, 2026
  19

• Proposal: runtime-trace v0.2 (backward-compatible additions and clarifications)

  in-toto/attestation#557 · Filter by author rung opened on Jun 9, 2026
  30

• RFC: agent-decision/v0.1 predicate for AI agent policy decisions

  in-toto/attestation#554 · Filter by author 0xff4c1d opened on May 19, 2026
  28

• Very old version only available on Pypi

  in-toto/attestation#526 · Filter by author SequeI opened on Jan 29, 2026
  2

• Replace protobufs with JSON schema?

  in-toto/attestation#466 · Filter by author marcelamelara opened on May 19, 2025
  1

• Ambiguity between inputs and outputs in v1

  enhancement
  in-toto/attestation#457 · Filter by author trishankatdatadog opened on May 7, 2025
  4

• redirect to another intoto.jsonl bundle?

  in-toto/attestation#447 · Filter by author loosebazooka opened on Mar 19, 2025
  4

• Make in-toto Bundles a recommendation, rather than part of the spec

  in-toto/attestation#436 · Filter by author marcelamelara opened on Jan 25, 2025

• Should vuln db lastUpdate be optional in vulns predicate

  in-toto/attestation#409 · Filter by author lumjjb opened on Nov 16, 2024

• Add a deployment attestation

  in-toto/attestation#407 · Filter by author marcelamelara opened on Nov 13, 2024

• Define a "processing hint" attribute to improve supply chain adoption experience

  in-toto/attestation#405 · Filter by author AdamZWu opened on Nov 9, 2024

• Vulns attestation "result" struct discrepancy

  in-toto/attestation#391 · Filter by author lumjjb opened on Oct 11, 2024
  4

• VSA JSON struct tags

  in-toto/attestation#379 · Filter by author ramonpetgrave64 opened on Aug 28, 2024

• Should we categorize different predicate types?

  documentationenhancementpredicatestriage
  in-toto/attestation#377 · Filter by author marcelamelara opened on Aug 14, 2024

• Predicate object cannot be optional?

  triage
  in-toto/attestation#374 · Filter by author mihaimaruseac opened on Jul 27, 2024

• Making predicateTypes consistent with predicate names

  bugpredicates
  in-toto/attestation#371 · Filter by author marcelamelara opened on Jul 3, 2024
  2

  

• Need for Issue and Pull Request Templates

  good first issuehelp wanted
  in-toto/attestation#362 · Filter by author DarikshaAnsari opened on Jun 2, 2024
  8

  

• FR or ITE? CDDL definition for JSON/CBOR plus bindings in Go/Python

  triage
  in-toto/attestation#361 · Filter by author deeglaze opened on May 30, 2024

• subject part of spec not precise enough for validation

  triage
  in-toto/attestation#349 · Filter by author fmoessbauer opened on Apr 21, 2024
  2

• Guidance on subject[*].name uniqueness with Image Indexes

  triage
  in-toto/attestation#348 · Filter by author lcarva opened on Apr 18, 2024
  16

• Conflict in Vulnerabilities predicate definition

  in-toto/attestation#342 · Filter by author sherzberg-1 opened on Apr 2, 2024

• Generate TypeScript protobuf bindings

  good first issuehelp wantedprotos
  in-toto/attestation#339 · Filter by author bdehamer opened on Mar 16, 2024
  1