Look into using sigstore or similar

twiss / source-code-transparency

Source Code Transparency

11 stars 0 forks source link

Open twiss opened 9 months ago

twiss commented 9 months ago

Rather than creating a new transparency log, we could evaluate whether sigstore would be sufficient for our purposes.

elimisteve commented 5 months ago

Exactly what I came here to suggest! Seems like a good fit. 👍