РазведкаОригинал на английском
Witness: Open-source framework for verifying how your software was built
Русский перевод готовится и скоро появится на сайте. Пока доступен оригинал на английском.
Witness is an open-source command-line tool that records how software gets built, signs that record, and checks it against a policy before the software ships. TestifySec built Witness and donated it to the in-toto ecosystem within the Cloud Native Computing Foundation, and an ope
Help Net Security··3 мин чтения
Witness is an open-source command-line tool that records how software gets built, signs that record, and checks it against a policy before the software ships. TestifySec built Witness and donated it to the in-toto ecosystem within the Cloud Native Computing Foundation, and an open community now maintains it. A compiled binary doesn’t say which machine built it or what code went in. Witness lets a team check which command produced the file, which materials went … More → The post Witness: Open-source framework for verifying how your software was built appeared first on Help Net Security.