SuperQ/chrony_exporter

Please sign your releases

Opened this issue 8 months ago · 1 comments

udf2457 commented 8 months ago

It is easier than ever to do in 2024! You can even do it fully-automated via Github Actions, Github OIDC and Sigstore "keyless" signing.

udf2457 commented 8 months ago

Useful references:
https://github.com/slsa-framework/slsa-github-generator/blob/main/internal/builders/generic/README.md#provenance-for-goreleaser
https://goreleaser.com/blog/slsa-generation-for-your-artifacts/#slsa-github-generator