Sigstore + Gitsign: Signed Commits Without GPG Pain
Keyless signed git commits with Sigstore and Gitsign—no GPG key rot, no passphrase prompts. OIDC-backed ephemeral certs that just work.
Tag: supply-chain
All the articles with the tag "supply-chain".