2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33
-
We attended the 2024 Homebrew AGM and presented the current status of our work, as well as future plans, to the Homebrew member body.
-
We merged v3 bundle verification support in
sigstore-python: sigstore/sigstore-python#901 -
We have produced an MVP implementation of
brew verifyfor attestation verification, and have temporarily homed in under https://github.com/trailofbits/homebrew-brew-verify pending further review and upstreaming intoHomebrew/brew. -
We completed our initial API changes to
betterptoto: danielgtaylor/python-betterproto#551
-
We are making further upstream improvements and fixes to
betterproto, as part of unblocking support forbetterprotoinin_toto_attestations: danielgtaylor/python-betterproto#559 -
We are continuing our work on DSSE support in
sigstore-python, working on DSSE verification after last month's DSSE signature generation work: sigstore/sigstore-python#904 -
We are continuing our work on "backfill" attestations for
homebrew-core, beginning with a survey of pre-existing unattested bottles and scheduling mechanisms for signing them in batches. Our progress is here: https://github.com/trailofbits/homebrew-brew-verify/tree/backfill
Use Control + Shift + m to toggle the tab key moving focus. Alternatively, use esc then tab to move to the next interactive element on the page. No file chosen Attach files by dragging & dropping, selecting or pasting them.