
Debaudit was developed wit hthe intent of helping to secure the software supply chain used to build Debian binary packages. Debaudit consists of upstream2orig, git2dsc, and git2orig. The upstream2orig verifies the upstream tarball found in Debian is a faithful representation of the original source code from upstream. The git2sc helps verify the source packages from the Vcs-Git repository matches





