CodeLocker: A Code Signing Platform Meeting NIST 800-53 Rev. 5 for Software Assurance, Code Provenance, and Authentication

CodeLocker enhances software security by using trusted digital signatures and audit logs integrated within SDLC DevOps. It provides an automated way to sign source code commits and build artifacts, ensuring end-to-end software provenance and non-repudiation. By preventing unauthorized modifications and securing the software supply chain, CodeLocker helps mitigate the risks of malware infiltration.