Verified Commit 22dc621d authored by anarcat's avatar anarcat
Browse files

more verification mechanisms

parent 1f83542d
Loading
Loading
Loading
Loading
+2 −0
Original line number Diff line number Diff line
@@ -1685,6 +1685,8 @@ like a good compromise.
   dependencies, delegates sharing signatures to git, but
   cryptographically signs them so should be resilient against a
   server compromise
 * [arch linux upstream tag verifications](https://vulns.xyz/2022/05/auth-tarball-from-git/)
 * [Linux kernel OpenPGP keys distribution repository](https://git.kernel.org/pub/scm/docs/kernel/pgpkeys.git/tree/README.rst) 

## Migration from Trac