Check code signatures - Githubissues

debops / debops-tools

Your Debian-based data center in a box

https://debops.org/

GNU General Public License v3.0

1.07k stars 116 forks source link

Open ypid opened 8 years ago

ypid commented 8 years ago

With the debops-keyring and the DebOps Code Signing Policy in place. The DebOps Tools should bootstrap and check signatures using the keyring.

Benefits:

After initial trust is established on first debops update run, GitHub is no longer part of the TCB.