News for hackers. Stuff that matters.
Re:A toolbox for a secure software supply chain by kelsolaar on Friday August 26, 2022 @05:22AM (#32605019)
There is certainly a lot of value to provide a system that is easy to use for developers from commits to the distribution. There does not seem to be a simple solution to do that.
Re:A toolbox for a secure software supply chain by kimsterv on Friday August 26, 2022 @02:23PM (#32610992)
Def check out the gitsign project mentioned in the post: https://github.com/sigstore/gitsign