Software Supply Chain Security

27
Oct
Building a Signed Software Supply Chain for a One-Person SaaS

Building a Signed Software Supply Chain for a One-Person SaaS

Every commit to my SaaS is now signed by a short-lived certificate, every release is signed by the CI
8 min read