Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

agree, sigstore is an awesome project when you delve into the architecture. transparency logs and ephemeral key signing!


You'll probably enjoy how it is being used to secure the Arch Linux package ecosystem then:

https://github.com/kpcyrd/pacman-bintrans




Consider applying for YC's Winter 2027 batch! Applications are open till November 2.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: