search

mamba-org / mamba

The Fast Cross-Platform Package Manager
https://mamba.readthedocs.io
BSD 3-Clause "New" or "Revised" License
6.57k stars 343 forks source link

Digital signatures #3279

Open santi12386 opened 2 months ago

santi12386 commented 2 months ago

Hi,

I'd like to request the digital signature of the main .exe files for the new releases of the application in windows, if possible. Thanks!

westurner commented 2 months ago

SLSA.dev specifies provenance metadata and optionally works with https://sigstore.dev/ ; e.g. flask is a slsa-github-generator Hall of Fame participant. Here's the SLSA3 GitHub action: