Skip to content

verify: accept GitHub release immutability + Sigstore attestation as runtime-download trust anchor#887

Merged
potiuk merged 3 commits into
mainfrom
verify-trusted-download-provenance
Jun 25, 2026
Merged

verify: accept GitHub release immutability + Sigstore attestation as runtime-download trust anchor#887
potiuk merged 3 commits into
mainfrom
verify-trusted-download-provenance

docs: clarify trusted-download spot-check scope; fix asset-preference…

115b628
Select commit
Loading
Failed to load commit list.

Select a check to view from the sidebar