3 ms·
The piece you’re missing is that P(B) is itself digitally signed, in the form of an OIDC token from the GitHub Actions IdP. An attacker can’t contrive it withou
by woodruffw 3y ago
The piece you’re missing is that P(B) is itself digitally signed, in the form of an OIDC token from the GitHub Actions IdP. An attacker can’t contrive it without access to the IdP’s key material.
(This is all compatible with reproducible builds, for the reason you’ve noted.)
And yes: Build L2 is the goal here. L3 assumes trusted hardware, which is a much higher bar to clear.