Skip to content
A peek into build provenance for Homebrew
blog.trailofbits.com | blog | #open-source | #cryptography | #supply-chain-security | #slsa | #homebrew | #build-provenance
Summary
Trail of Bits brings cryptographic build provenance to Homebrew: homebrew-core now attests all CI-built bottles, binding them to git commits and GitHub Actions run IDs in SLSA-compatible attestations.
- Published
- Collected