TrueSource

Team: Rohan Thakkar Solana Wallet: FxAZmVcP9cdpintPvjQubkKzsgf39nxbWJ5oU2u7utq4

Uses: Trivy, Cosign, Alpine Linux, Docker, npm audit, Falco, Loki, Grafana, NGINX, WAF, OPA Solana Smart Contracts

Inspiration

I love buying secondhand goods, though I don't spend much on secondhand luxury goods like designer clothes because I'm worried they might be counterfeit. Since I'd like there to be a healthy market for secondhand luxury goods, the idea of a way to track a product without using a manufacturer's website is one that I wanted to see implemented.

What it does

TrueSource allows manufacturers to create immutable product records where ownership changes are verified with wallet signatures. Service providers log maintenance and repairs on-chain — similar to CarFax, TrueSource allows users to know the history of their product (or a product they want to buy). Since TrueSource uses provenance verification, anyone can verify complete product history.

Challenges I ran into

Content Security Policy is quite difficult to debug with within a hackathon's timeframe.

What we learned

I learned more about how to use GitHub Actions How smart contracts work — before even trying to integrate Solana, I tried to design my own blockchain to allow for ownership transfer and crafted a solution incredibly similar to smart contracts but with decentralized appending and verification. I ended up just using Solana smart contracts since it was the more elegant solution Falco really doesn't like WSL2 Trivy is silly