npm package

sigstore

3.1.0

Default version

Published

Description

code-signing for npm packages

Attestations

SLSA Provenance Attestation
This version has a SLSA provenance attestation.
VERIFIEDThe Sigstore bundle containing this attestation was verified using sigstore-go.

Repository
github.com/sigstore/sigstore-js (06cd2)
Build config
github.com/sigstore/sigstore-js/.github/workflows/release.yml
Built by
GHA on GitHub
Log date
The time this entry was integrated into the rekor transparency log.
(index 168704762)
Workflow run
13144357684
SLSA Version
1
To verify the attestation, run the "npm audit signatures" command or download the attestations bundle from NPM and use the slsa-verifier tool.

Links

Origin
Homepage
Repo
Issues
Attestations

Projects

sigstore/sigstore-js

GitHub

Code-signing for npm packages

 26 forks
 161 stars

Project metadata as of .