3 ms·
agree, sigstore is an awesome project when you delve into the architecture. transparency logs and ephemeral key signing!
by playcache 5y ago
agree, sigstore is an awesome project when you delve into the architecture. transparency logs and ephemeral key signing!
- dane-pgp 5y agoYou'll probably enjoy how it is being used to secure the Arch Linux package ecosystem then: https://github.com/kpcyrd/pacman-bintrans https://github.com/kpcyrd/pacman-bintrans
- deleted 5y ago[deleted]