Open jevonearth opened 1 year ago
Users of Taquito would like assurance that Taquito packages are secure and untampered via software supply chain attacks
Describe the solution you'd like
Investigate the use of sigstore.dev
Particularly; https://github.com/sigstore/sigstore-js
Is this for Taqueria or Taquito @jev?
Users of Taquito would like assurance that Taquito packages are secure and untampered via software supply chain attacks
Describe the solution you'd like
Investigate the use of sigstore.dev
Particularly; https://github.com/sigstore/sigstore-js