Skip to content

verify: accept GitHub release immutability + Sigstore attestation as runtime-download trust anchor#887

Merged
potiuk merged 3 commits into
mainfrom
verify-trusted-download-provenance
Jun 25, 2026
Merged

verify: accept GitHub release immutability + Sigstore attestation as runtime-download trust anchor#887
potiuk merged 3 commits into
mainfrom
verify-trusted-download-provenance

docs: clarify trusted-download spot-check scope; fix asset-preference…

115b628
Select commit
Loading
Failed to load commit list.
GitHub Advanced Security / CodeQL succeeded Jun 8, 2026 in 5s

No new alerts in code changed by this pull request

View all branch alerts.