Identity-based Source Integrity with Gitsign - Billy Lynch, Chainguard
Source Attestations with Gitsign - Billy Lynch, Chainguard
Gitsign – Keyless Git Commit Signing - Billy Lynch, Chainguard Inc
Understanding Attestation in Confidential Computing: Supply Chain Security
Building SLSA 3 Conforment Attestors for Artifacts Generated on GitHub- Ian Lewis & Asra Ali, Google
Code signing and securing the software supply chain with Billy Lynch