Post #1834534
2026-03-24 21:58 UTC
@tmr232 @brettcannon Reproducibility and security go hand in hand! 🤝
Replies (1)
-
@tmr232@mastodon.social 2026-03-24 22:06
@sethmlarson @brettcannon any recommendations on how to use those attestations in production? I found the format docs, but I'm not sure what to do with the data without supporting tooling (installers or index mirrors that block installing if the data goes missing?) That said, I'll start reviewing lockfiles more carefully.