To keep track of software provenance in a secure way, customers need an automated and immutable technology platform. VivSoft ensures "Chain of Custody" for the software supply chain using Blockchain technology. VivSoft's Enchoc platform uses Cryptographic Keys to provide immutable context of "who did what when". By using cryptographic keys to sign data about users and results from automated software build and deployment tools, Enchoc ensures that the chain of custody is immutable and provides visibility into the software development cycle. A software Continuous Integration (CI) /Continuous Delivery (CD) pipeline generates data at multiple stages as it automates the tests and validates software for security, functionality and policy compliance. Enchoc captures this test result data and writes it into a Hyperledger platform based on the linux foundation's HyperLedger Fabric platform. Each commit transaction results in a block being attached to the Hyperledger fabric which running on a Kubernetes cluster.
