auth-tarball-from-git: verifying signed git tags without sha256sums=(SKIP)
29 May
2022
29 May
'22
6:40 a.m.
ohai! I blogged about a new tool that can be used to verify a tarball from a signed git tag, while still pinning the sourcecode with >= sha256sum: https://vulns.xyz/2022/05/auth-tarball-from-git/ Let me know what you think - that's all, kpcyrd
688
Age (days ago)
688
Last active (days ago)
7 comments
6 participants
participants (6)
-
Allan McRae
-
Archange
-
David Runge
-
Jonas Witschel
-
kpcyrd
-
Morten Linderud