3 ms·
The windows version is fixed, the posix version is depending on whatever meilisearch decides. A digital signature check would be great for supply chain security
by whilenot-dev 3y ago
The windows version is fixed, the posix version is depending on whatever meilisearch decides. A digital signature check would be great for supply chain security, eg. with cosign[0]. meilisearch prob won't make any effort there, since they want customers on their cloud offering.
[0]: https://docs.sigstore.dev/signing/signing_with_blobs/ https://docs.sigstore.dev/signing/signing_with_blobs/