Please sign your releases - Githubissues

SuperQ / chrony_exporter

Exporter for Chrony NTP

Apache License 2.0

55 stars 14 forks source link

Please sign your releases #77

Open udf2457 opened 7 months ago

udf2457 commented 7 months ago

It is easier than ever to do in 2024! You can even do it fully-automated via Github Actions, Github OIDC and Sigstore "keyless" signing.

udf2457 commented 7 months ago

Useful references: https://github.com/slsa-framework/slsa-github-generator/blob/main/internal/builders/generic/README.md#provenance-for-goreleaser https://goreleaser.com/blog/slsa-generation-for-your-artifacts/#slsa-github-generator