Collect during delivery
Witness records attestations around existing analysis, build, and test work.
CNCF case study · February 2, 2025
Evidence from the work.
Ready for review.
CNCF describes how Autodesk uses Witness and Archivista to collect provenance across CI/CD and support its FedRAMP supply-chain requirements.
TestifySec PDF edition · 3 pagesFrom the published case study
A shared evidence trail across a varied stack.
Keep the records connected
Archivista stores attestations so teams can retrieve them for verification and review.
Support technical controls
CNCF reports that these tools helped Autodesk meet supply-chain requirements relevant to its FedRAMP authorization.
The study covers Witness and Archivista, open-source projects created by TestifySec. Read the original account ↗
Apply the approach to your team
Start with the work you need to trust.
Capture a result with CI/lock, check it at a Pushgate gate, and manage your requirements across the platform.