3 ms·
Gossamer: Supply Chain Security for Open-Source Software
- dane-pgp 5y agoThe idea of transparency logs for software is also being developed by Google with its Trillian project[0], but Gossamer seems to go further by also logging code review and security audit results, which is similar to the idea of Crev[1] from the Rust ecosystem. [0] https://transparency.dev/#trillian https://transparency.dev/#trillian [1] https://github.com/crev-dev/crev https://github.com/crev-dev/crev