-
The following CI pipeline uses CentOS 7 which is **EOL** now:
https://github.com/falcosecurity/falco/blob/c25ded8f393ddd89f46f330f6e53c806d5bf2423/.github/workflows/reusable_build_packages.yaml#L55…
-
Currently, `cosign import-key-pair` only has support for [RSA and ECDSA keys in PEM format](https://docs.sigstore.dev/cosign/import-keypair/) and does not offer support for importing GPG keys. The mot…
-
When first logging in on a new account, we try to publish cross-signing keys (via `/device_keys/upload`).
This process can fail for example, if the homeserver is configured to use SSO auth. (Publis…
-
Collections content currently cannot be “trusted”, where trust means confidence in the code’s origin and that it is unmodified.
Proposal to solve this can be viewed here:
https://docs.google.com…
-
## Introduction
As a publisher, I want to verify my content with retailers to guard against fraudulent sales and ensure readers are getting the real version of the book.
## Detail
* What is …
-
On updating to the latest version 4.1.2, I got
```
[INFO] --- gpg:3.1.0:sign (sign-artifacts) @ CmpRaComponent ---
[INFO] Signing 6 files with default secret key.
gpg: directory '/Users/david/.gnu…
-
@oschwald it looks like rpms/packages are not signed using GPG keys. Do we have any plans to sign packages and make pub keys available to validate RPM using keys?
-
**What would you like to be added**:
An increasing number of cloud-native initiatives are integrating [cosign](https://github.com/sigstore/cosign) for artifact signing and verification. It woul…
Xieql updated
8 months ago
-
With configuration:
``` yaml
nelmio_security:
# signs/verifies all cookies
signed_cookie:
names: ['symfony', 'two_factor_trusted_computer']
```
I get my system cannot login anym…
-
So it seems macOS is getting stricter with code signing. For YarnSpinnerTool releases who would be signing or would each developer just have to do their own build?