2 ms·
Sounds like a good opportunity for integration with GPG, keybase, and other signing tools.
by aaron_m04 8y ago
Sounds like a good opportunity for integration with GPG, keybase, and other signing tools.
- kingosticks 8y agoI was surprised that there was no gitlab integration with keybase when I signed up last night to check it out. Not just to save me manually copying my key but for the cross-platform identity verification.
- Boulth 8y agoIt's not that easy to solve in general. Usually these artifacts are built by CI so it'd have to sign them too (if they are not reproducible the you can't build them locally and check if they are the same). So a person that has admin access in CI can do that too. Of course current design leaves much to be desired.