GOSH launches AnyTree 🌳

To solve the problem of supply chain security, GOSH has developed AnyTree, a software deployment system that provides source code-level security using cryptographic signatures and proprietary Deep SBOM technology.

🔵The system works with a variety of package managers and applications, allowing developers to deliver content in a familiar way

🔵It logs all code changes, dependencies, builds and artifacts on the blockchain, thus providing transparency and verifiability

🔵Using Deep SBOM technology, the system focuses on in-depth observability of controlled software — this allows real-time monitoring of software content and helps identify vulnerabilities

🔵Using blockchain technology, it also provides transparency in verifying the source code used in packages — this protects against potential attacks and provides trust for developers and end users

🔵By integrating with GOSH Builder, the system has the ability to isolate and reproduce individual software builds — this allows developers to maintain consistency and trust

AnyTree is currently available in beta for Linux, but support for Windows and macOS is also planned.

#gosh #anytree #post

AnyTree — how to use it in your Git? 🌳

We previously wrote about the launch of AnyTree, a software deployment system that provides source code-level security using cryptographic signatures and proprietary Deep SBOM technology.

AnyTree supports popular Git repositories such as GitHub and GitLab, allowing developers to maintain existing workflows and ensure security. And Deep SBOM technology solves the problem of software reproducibility and verifiability.

Unlike traditional static software specifications (SBOM), Deep SBOM provides an unprecedented level of transparency. It describes each step, resource, and dependency in detail, ensuring that software artifacts are accurately reproduced.

This process minimizes inconsistencies, vulnerabilities and the need for manual audits, bridging the gap between manual and automated security reviews.

To use AnyTree with GitHub:

⏺1️⃣ Clone the repository of AnyTree
⏺2️⃣ Run «make install» command
⏺3️⃣ Generate SBOM with Python script
🔵4️⃣ Build the application using the generated SBOM

Deep SBOM functionality extends to all Git users, improving security even if not all GOSH features are used.

AnyTree's core philosophy is based on the principles of trust, allowing developers to take advantage of untrusted signatures and immutable assemblies based on a trusted infrastructure.

🛡 This approach provides additional security for the software supply chain, allowing you to instantly recognize errors and intrusions.

🔗 More details: in this article.

#gosh #git #anytree #post