fatt tries to find any purl in your project by looking at predefined fields in the supported packages. These fields describe using a purl where to grab the attestation from.
Geek Repo:Geek Repo
Github PK Tool:Github PK Tool