_reports/2022-03.md

@@ -24,3 +24,6 @@ draft: true
 * [FIXME](https://arxiv.org/pdf/2203.07953.pdf)
 
 * [FIXME](https://fossa.com/blog/three-pillars-reproducible-builds/) and discussion about it on hacker news: https://news.ycombinator.com/item?id=30604954
+
+* [FIXME: in-toto has been accepted as an incubating project for the Cloud Native Computing Foundation (CNCF). full announcement:](https://www.cncf.io/blog/2022/03/10/supply-chain-security-project-in-toto-moves-to-the-cncf-incubator/)
+