Open Source Security Podcast

By Josh Bressers & Kurt Seifried

GitHub artifact attestation

🔊 Play episode (37 min)

Direct episode link

💬 Share episode

Published May 12, 2024 7:00pm

Josh and Kurt talk about a new to sign artifacts on GitHub. It's in beta, it's not going to be easy to use, it will have bugs. But that's all OK. This is how we start. We need infrastructure like this to enable easier to use features in the future. Someday, everything will be signed by default. Show Notes GitHub artifact attestation

Return to podcast