agree, sigstore is an awesome project when you delve into the architecture. tran... | Hacker News

Hacker News new | past | comments | ask | show | jobs | submit

login

playcache on Oct 1, 2021 | parent | context | favorite | on: The Secure Open Source Pilot Program

agree, sigstore is an awesome project when you delve into the architecture. transparency logs and ephemeral key signing!

dane-pgp on Oct 1, 2021 [–]

You'll probably enjoy how it is being used to secure the Arch Linux package ecosystem then:

https://github.com/kpcyrd/pacman-bintrans

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact