It's a "binary transparency" system, allowing software developers to publish the hashes of their releases, signed with their project-specific key, to protect th

It's a "binary transparency" system, allowing software developers to publish the hashes of their releases, signed with their project-specific key, to protect the software supply chain. In particular, it can protect against compromised CI systems, and attacks where different users are given different binaries which are purporting to be a specific version. Combined with ideas like reproducible builds, and distributed code review[0], it can fix some of the single-points-of-failure that attackers might target. [0] https://github.com/crev-dev/crev https://github.com/crev-dev/crev