Kettle: Attested builds for verifiable software provenance

Amean Asad, André Arko

Kettle is an attested build system that produces cryptographically verifiable provenance for software built inside Trusted Execution Environments (TEEs). A Kettle build records the…