Go implementation of the in-toto (provides a framework to protect the integrity of the software supply chain) python reference implementation.