Yep SLSA is more than just a trusted end point. Package signatures, reproducible builds, SBOMs, signed commits and more!
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
Yep SLSA is more than just a trusted end point. Package signatures, reproducible builds, SBOMs, signed commits and more!