Look into using sigstore or similar

twiss / source-code-transparency

Source Code Transparency

11 stars 0 forks source link

Open twiss opened 1 year ago

twiss commented 1 year ago

Rather than creating a new transparency log, we could evaluate whether sigstore would be sufficient for our purposes.

elimisteve commented 10 months ago

Exactly what I came here to suggest! Seems like a good fit. 👍