Skip to content

Verify package attestations and enforce provenance policies in pub get/upgrade - #4875

Draft
mosuem wants to merge 6 commits into
publish-with-attestationfrom
verify-sigstore-attestation
Draft

Verify package attestations and enforce provenance policies in pub get/upgrade#4875
mosuem wants to merge 6 commits into
publish-with-attestationfrom
verify-sigstore-attestation

Resolve Sigstore trusted root from pub cache and embedded fallback wi…

7647f0d
Select commit
Loading
Failed to load commit list.