Hybrid Chain of Trust (HCoT) – software supply chain verification
Project description
🔗 HCoT CLI – Hybrid Chain of Trust
HCoT CLI is a free, open‑source command‑line tool that implements the Hybrid Chain of Trust (HCoT) framework – a unified pre‑deployment security architecture for software supply chains.
📄 Peer‑reviewed paper:
Qureshi, J. (2025). A Secure and Integrated Approach to Software Code and Docker Image Signing: Introducing the Hybrid Chain of Trust (HCoT) Algorithm.
International Journal of Artificial Intelligence and Machine Learning, 5(2), 16–22.
DOI: 10.51483/IJAIML.5.2.2025.16-22
🚀 Why HCoT?
Software supply chain attacks increased 742% in the last three years (Sonatype, 2025). HCoT addresses this by:
- ✅ Cryptographic verification (SHA‑256 + RSA signatures)
- ✅ Tamper‑evident blockchain log (append‑only, chained hashes)
- ✅ Real‑time vulnerability scanning (via OSV API)
- ✅ Policy enforcement (registries, signatures, CVSS thresholds)
- ✅ Docker image support (layer inspection + integrity check)
📦 Installation
pip install hcot-cli
Release history Release notifications | RSS feed
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
Built Distribution
Filter files by name, interpreter, ABI, and platform.
If you're not sure about the file name format, learn more about wheel file names.
Copy a direct link to the current filters
File details
Details for the file hcot_cli-0.1.1.tar.gz.
File metadata
- Download URL: hcot_cli-0.1.1.tar.gz
- Upload date:
- Size: 3.0 kB
- Tags: Source
- Uploaded using Trusted Publishing? No
- Uploaded via: twine/6.2.0 CPython/3.11.15
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
98f1b16bd8695f53e50db2d5700f9063e018713532fa554e253cef81fbf7b569
|
|
| MD5 |
54edc4e22d50e9627b6012e0b0a5a04b
|
|
| BLAKE2b-256 |
a6e7e59a6c8544fd9afe1e4a513a2930b6e4628829f7eba16f2bb4ba0a9dfab1
|
File details
Details for the file hcot_cli-0.1.1-py3-none-any.whl.
File metadata
- Download URL: hcot_cli-0.1.1-py3-none-any.whl
- Upload date:
- Size: 3.2 kB
- Tags: Python 3
- Uploaded using Trusted Publishing? No
- Uploaded via: twine/6.2.0 CPython/3.11.15
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
24388f8d315d469c659a0f090dbbecacb057d3feb1f92f41d9c484083f51eb47
|
|
| MD5 |
844b03b8815627876143c958eac3ee6d
|
|
| BLAKE2b-256 |
724244616b7ab3c90d0e469b68c55ecf9e8c28e16fcced5b4dd6d657d5197c00
|
