Tag: slsa

• posts

• Code Signing is not Enough

  Feb 1, 2024

  • security
  • slsa
  Code signing is often used as a method for ensuring that software artifacts like binaries, drivers, and software packages haven’t been modified by a third party before they are used. Many folks may be familiar with packages that were gpg signed an...