Skip to content

Verify package attestations and enforce provenance policies in pub get/upgrade - #4875

Draft
mosuem wants to merge 10 commits into
mainfrom
verify-sigstore-attestation
Draft

Verify package attestations and enforce provenance policies in pub get/upgrade#4875
mosuem wants to merge 10 commits into
mainfrom
verify-sigstore-attestation

Address review: verify by digest, fetch attestation separately, trust…

7cfab61
Select commit
Loading
Failed to load commit list.

Select a check to view from the sidebar