CHALK

Summary from the TLDR InfoSec newsletter

Chalk captures metadata at build time. It can add a small 'chalk mark' (metadata) to any artifact so it can be identified in production. Chalk can also extract chalk marks and collect additional metadata about the operating environment when it does this.