GitHub DIDs & VCs for Supply Chain Traceability

Friends,

I wanted to share some very recent (experimental and unstable) work we've
done to enable Decentralized Identifiers
<https://streaklinks.com/A9ihbOCZmZ3rNzrgmAVCXppD/https%3A%2F%2Fwww.w3.org%2FTR%2Fdid-core%2F>
 and Verifiable Credentials
<https://streaklinks.com/A9ihbOCExLDI4-0d7waTv2O1/https%3A%2F%2Fwww.w3.org%2FTR%2Fvc-data-model%2F>
to
assist with the software supply chain.

Here are the links:

- https://github.com/transmute-industries/verifiable-actions
<https://streaklinks.com/A9ihbOC5eVabfKC1-Aw6ragl/https%3A%2F%2Fgithub.com%2Ftransmute-industries%2Fverifiable-actions>
-
https://github.com/transmute-industries/public-credential-registry-template
<https://streaklinks.com/A9ihbOGgYCn2PWerywYJJDn4/https%3A%2F%2Fgithub.com%2Ftransmute-industries%2Fpublic-credential-registry-template>

The key idea is to enable github actions to sign and verify credentials
that conform to the W3C Verifiable Credentials standard (which in turn
supports various envelope formats including JOSE, COSE and PGP).

The issuers are identified with W3C Decentralized Identifiers, which
provide a layer of interoperability for public key identifier registries.
The key value of this standard is the ability to support both traditional
public key based identifiers, web resource based identifiers and
blockchain based identifiers in the same data model.

The examples in the repository links above demonstrate support for these
standards using did:key
<https://streaklinks.com/A9ihbOCDw-2vyryTvwTqc-f_/https%3A%2F%2Fw3c-ccg.github.io%2Fdid-method-key%2F>
 and did:web
<https://streaklinks.com/A9ihbOGiIkcObJKZ8ArgtV5y/https%3A%2F%2Fgithub.com%2Fw3c-ccg%2Fdid-method-web>
,
however I am one of the editors of the Sidetree Protocol
<https://streaklinks.com/A9ihbOG5eVJQCS5QNQj23Too/https%3A%2F%2Fgithub.com%2Fdecentralized-identity%2Fsidetree>
which
is what powers did:ion
<https://streaklinks.com/A9ihbOGv7-xYVsgSAQIO283i/https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fidentity-standards-blog%2Fion-we-have-liftoff%2Fba-p%2F1441555>
which
is being developed by Microsoft and other DIF members...
The GitHub examples I provided will also work with did:ion.

Feel free to raise issues on any of the repositories linked, or ask me
questions directly by email if you are not comfortable commenting on a
public repo.

Regards,

-- 
*ORIE STEELE*
Chief Technical Officer
www.transmute.industries

<https://streaklinks.com/A9ihbOCi4nwgCYt6GAMOmDLj/https%3A%2F%2Fwww.transmute.industries>
ᐧ