PyPI adds security tab for release attestations
Developers can review digital attestations and provenance status for every release file on project pages.
Stories per day · 30 days
2 stories, newest first · one card per story
Stories tagged #attestations
Witness records and checks how software was built before release
TestifySec donated the CLI to CNCF’s in-toto project; it signs build attestations and fails CI when policy checks do not pass.
1