Skip to content

Commit

Permalink
add lifecycle for new probe
Browse files Browse the repository at this point in the history
Signed-off-by: Spencer Schrock <[email protected]>
  • Loading branch information
spencerschrock committed Jun 11, 2024
1 parent 0dae017 commit 38e38f3
Showing 1 changed file with 1 addition and 0 deletions.
1 change: 1 addition & 0 deletions probes/releasesHaveVerifiedProvenance/def.yml
Original file line number Diff line number Diff line change
Expand Up @@ -13,6 +13,7 @@
# limitations under the License.

id: releasesHaveVerifiedProvenance
lifecycle: experimental
short: Checks if the project releases with provenance attestations that have been verified
motivation: >
Package provenance attestations provide a greater guarantee of authenticity and integrity than package signatures alone, since the attestation can be performed over a hash of both the package contents and metadata. Developers can attest to particular qualities of the build, such as the build environment, build steps or builder identity.
Expand Down

0 comments on commit 38e38f3

Please sign in to comment.