CHALK

Summary from the TLDR InfoSec newsletter

Chalk captures metadata at build time and can add a small 'chalk mark' (metadata) to any artifacts so that they can be identified in production. It can also extract chalk marks and collect additional metadata about the operating environment during this process.