Andre Lustosa

ANDRE LUSTOSA / TAG

#attestations

1 entry with this tag.

  1. A Release Has Three Trust Decisions

    Version identity, permission to publish, and artifact integrity answer different questions. A release pipeline is trustworthy only when it connects all three.

← All writing