Chainloop is an open-source evidence store for software supply chain attestations, Software Bill of Materials (SBOMs), vulnerability reports (VEX), SARIF, CSAF files, QA reports, and more. By using Chainloop, you can ensure that all submitted metadata is attested, digitally signed, evaluated, routed, and securely stored.