ANDRE LUSTOSA / TAG
#oidc
1 entry with this tag.
A Release Has Three Trust Decisions
Version identity, permission to publish, and artifact integrity answer different questions. A release pipeline is trustworthy only when it connects all three.
ANDRE LUSTOSA / TAG
1 entry with this tag.
Version identity, permission to publish, and artifact integrity answer different questions. A release pipeline is trustworthy only when it connects all three.