CHALK

Summary from the TLDR InfoSec newsletter

Chalk captures metadata at build time. It can add a small 'chalk mark' (metadata) to any artifacts so they can be identified in production. Chalk can also extract chalk marks and collect additional metadata about the operating environment when it does this. It can be used to create software security supply chain compliance reports automatically.