Rookery
Rookery is the modular attestation monorepo where cilock is built. It splits the attestation core, every individual attestor, every signer, and the binary builder into separate Go modules so each can be versioned and consumed independently.
Archivista
Archivista is the default evidence store cilock integrates with, a searchable system for keeping signed build evidence instead of burying it in CI logs.
TestifySec Platform
The TestifySec platform is TestifySec's software supply chain attestation and compliance product, the larger commercial system that production teams use to manage attestations, run policy verification at scale, and produce compliance reports. Per TestifySec, it "enables a unified developer and cybersecurity governance experience to mitigate the risk of software supply chain attacks by integrating zero trust principles of observability and verification into software build pipelines".
Witness
Witness originated at TestifySec and was donated to the CNCF in-toto ecosystem. It is now maintained by the open community.