This repository has been archived by the owner on Feb 1, 2022. It is now read-only.

Investigate using project sigstore to sign binaries and releases #20

Open

alisondy opened this issue Jan 20, 2022 · 0 comments

alisondy commented Jan 20, 2022

I downloaded isstp, and on installation I notice that the binary isn't signed.

Having a signed binary would give me further confidence that the downloaded artifact hasn't been tampered with.

Check it out at https://docs.sigstore.dev/

✨

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.