1 link tagged with all of: open-source + supply-chain + security + provenance
Click any tag below to further narrow down your results
Links
Google has launched OSS Rebuild to enhance trust in open source software by automating the reproduction of package builds and generating SLSA Provenance. This initiative aims to improve security against supply chain attacks while minimizing the burden on package maintainers. By providing tools for build verification and observability, OSS Rebuild seeks to empower security teams and improve the integrity of open source software ecosystems.