in-toto is used at run time in 2 crates.

Depender in-toto version
sh4d0wup ^0.3.0
rebuilderd-worker ^0.3