3 ms·
Wouldn't you want to have certificates and other crypto data as an input to a reproducible build harness? # build initial images # add semi-static inputs (
by cduzz 2y ago
Wouldn't you want to have certificates and other crypto data as an input to a reproducible build harness?
# build initial images
# add semi-static inputs (mostly static config data, crypto data, signed inputs)
# add final watermarks
So each step can be verified
- bluGill 2y agoThat final watermark is not verifiable and so you can inject something else.