Post #2176663
2026-04-16 08:02 UTC
@slink@fosstodon.org
https://slsa.dev/
#slsa is the standard
Replies (1)
-
@slink@fosstodon.org 2026-04-16 08:43
@thomasfricke@23.social oh my. this is conway's law at it's best. I do not want to solve google's problem. I do not trust github. I want to allow our users to verify that we built a package. So this is not for me, at least not at this point. But thank you for the pointer anyways, I do appreciate your reply, this is no criticism of you.