“Installing most open source software today is equivalent to picking up a random thumb-drive off the sidewalk and plugging it into your machine.” security.googleblog.com/2021… 😬 It’s painful but it’s kind of true.

Introducing sigstore: Easy Code Signing & Verification for Supply Chain Integrity

Posted by Kim Lewandowski & Dan Lorenc, Google Open Source Security Team One of the fundamental security issues with open source is that it’...

security.googleblog.com

Mar 11, 2021 · 4:33 AM UTC
1
1
9