The gittuf GitHub app records gittuf-compatible metadata that can be used to meet a repository's policies. For example, the app records an in-toto attestation when a pull request is approved, and in turn, this attestation can be used to meet gittuf rules such as those requiring minimum approvals for merging into a protected branch.

Note: the app is currently in beta!