3 ms·
Didn’t know sigstore. The idea looks promising. They should work on marketing though. “Their” technology would work on any package repository, right? Also for
by BozeWolf 3y ago
Didn’t know sigstore. The idea looks promising. They should work on marketing though.
“Their” technology would work on any package repository, right? Also for npm and the likes.
- woodruffw 3y agoNot only would it work for NPM, but it already does[1] :-) [1]: https://blog.sigstore.dev/npm-public-beta/ https://blog.sigstore.dev/npm-public-beta/