implementing-supply-chain-security-with-in-toto — Agent Skill 安装配置（SkillsMP） · AgentHub

implementing-supply-chain-security-with-in-toto — Agent Skill 安装配置（SkillsMP）

Name: implementing-supply-chain-security-with-in-toto
Author: mukul975

SkillSkillsMP

io.github.mukul975/Anthropic-Cybersecurity-Skills/implementing-supply-chain-security-with-in-toto · vmain

Implements supply chain integrity verification for container builds with the in-toto framework: generating signing keys, defining a supply chain layout, recording pipeline steps as signed link metadata, verifying before deployment, enforcing at Kubernetes admission, and integrating with SLSA. Use when attesting CI/CD pipeline steps, proving an image followed the approved build process, or enforcing provenance at admission. Keywords: in-toto, layout, link metadata, step, inspection, SLSA, provenance, admission. Do not use for signing and verifying images with Cosign - use implementing-image-provenance-verification-with-cosign.

在 SkillsMP 查看 ↗源仓库 ↗

热度数据

仓库星标32k

概览

implementing-supply-chain-security-with-in-toto 是一个Agent Skill，收录自 SkillsMP。本页提供 Cursor、Claude Code 等客户端的安装配置片段。

适用场景

代码审查与 GitHub Cursor 开发必备

Agent Skill 是带 SKILL.md 的指令包。安装后，AI 会根据 description 在匹配任务时自动加载，无需每次手动粘贴提示词。

安装

选择你的平台查看安装方式

选择安装方式

# 改 -a 切换客户端：cursor | claude-code | codex | github-copilot
npx skills add mukul975/Anthropic-Cybersecurity-Skills@implementing-supply-chain-security-with-in-toto -a cursor -y

统一 Manifest

{
  "id": "io.github.mukul975/Anthropic-Cybersecurity-Skills/implementing-supply-chain-security-with-in-toto",
  "type": "skill",
  "version": "main",
  "displayName": "implementing-supply-chain-security-with-in-toto",
  "description": "Implements supply chain integrity verification for container builds with the in-toto framework: generating signing keys, defining a supply chain layout, recording pipeline steps as signed link metadata, verifying before deployment, enforcing at Kubernetes admission, and integrating with SLSA. Use when attesting CI/CD pipeline steps, proving an image followed the approved build process, or enforcing provenance at admission. Keywords: in-toto, layout, link metadata, step, inspection, SLSA, provenance, admission. Do not use for signing and verifying images with Cosign - use implementing-image-provenance-verification-with-cosign.",
  "author": {
    "name": "mukul975",
    "url": "https://github.com/mukul975"
  },
  "repository": {
    "url": "https://github.com/mukul975/Anthropic-Cybersecurity-Skills",
    "source": "github",
    "subfolder": "skills/implementing-supply-chain-security-with-in-toto"
  },
  "homepage": "https://skillsmp.com/creators/mukul975/anthropic-cybersecurity-skills/skills-implementing-supply-chain-security-with-in-toto",
  "distribution": {
    "packages": [
      {
        "registryType": "source",
        "identifier": "mukul975/Anthropic-Cybersecurity-Skills@implementing-supply-chain-security-with-in-toto",
        "version": "main",
        "runtimeHint": "npx skills add"
      }
    ],
    "remotes": []
  },
  "dependencies": [],
  "installTargets": [
    "claude-code",
    "claude-desktop",
    "cursor",
    "codex",
    "vscode"
  ],
  "keywords": [
    "repo_stars:32025"
  ],
  "provenance": {
    "origin": "skillsmp",
    "originalId": "mukul975-anthropic-cybersecurity-skills-skills-implementing-supply-chain-security-with-in-toto-skill-md",
    "originalUrl": "https://skillsmp.com/creators/mukul975/anthropic-cybersecurity-skills/skills-implementing-supply-chain-security-with-in-toto",
    "isOfficial": false,
    "status": "active"
  }
}

implementing-supply-chain-security-with-in-toto — Agent Skill 安装配置（SkillsMP）

概览

适用场景

安装

使用方式

相关资源

building-html-canvases

policy-and-managed-settings

triage-codacy

triage-codeql

packaging-static-installer

docs-learn-site-structure

统一 Manifest