Author here! > could've contributed SLSA attestations support to nix That sounds like a great idea! However one important consideration is that while an artifact on nixpkgs may aim to replicate the function of the…
Author here! > I'm very excited about this project Thank you! > but it could really do with a web UI of some sort! Couldn't agree more! The terminal UI exists (`./tools/ctl tui`) but is oriented towards developers on…
Author here! OSS Rebuild should give that Nebraskan the peace of mind to continue their everyday heroism without being pulled away to set up security configs or debug release CI. The rest of the blocks on top can…
Author here! > Does this require builds are done via CI Nope! One use for OSS Rebuild would be providing maintainers that have idiosyncratic release processes with an option for providing strong build integrity…
Author here! Both nix and guix are exciting projects with a lot of enviable security properties. Many here can attest that using them feels like, and perhaps is, the future. I see OSS Rebuild as serving more immediate…
Author here! > could've contributed SLSA attestations support to nix That sounds like a great idea! However one important consideration is that while an artifact on nixpkgs may aim to replicate the function of the…
Author here! > I'm very excited about this project Thank you! > but it could really do with a web UI of some sort! Couldn't agree more! The terminal UI exists (`./tools/ctl tui`) but is oriented towards developers on…
Author here! OSS Rebuild should give that Nebraskan the peace of mind to continue their everyday heroism without being pulled away to set up security configs or debug release CI. The rest of the blocks on top can…
Author here! > Does this require builds are done via CI Nope! One use for OSS Rebuild would be providing maintainers that have idiosyncratic release processes with an option for providing strong build integrity…
Author here! Both nix and guix are exciting projects with a lot of enviable security properties. Many here can attest that using them feels like, and perhaps is, the future. I see OSS Rebuild as serving more immediate…