What an artifact signature proves, and what it does not
DEV Community
What an artifact signature proves, and what it does not
Signing the JAR and the image, restricting who can sign, and being honest about the gap between a signature and real provenance.
0 comments
No comments yet.