1 parent 4c01ecb commit 7b8ad17Copy full SHA for 7b8ad17
2 files changed
docs/SECURITY.md
@@ -0,0 +1,11 @@
1
+# Security
2
+
3
+## Small code base
4
5
+## Fuzzing
6
7
+## Audit
8
9
+## Unsafe code
10
11
+Known problem: A lot of unsafe code. Open are ideas to mitigate this issue.
docs/TRUST.md
@@ -0,0 +1,19 @@
+# Trust
+## Supply-chain attacks
+Only crates available in the debian eco system are used.
+## Reproducable builds
+## Code coverage
+## Attestation
12
13
+SLSA Attestation
14
15
+https://github.com/actions/attest-build-provenance
16
17
+## Signed artifacts
18
19
+Sigstore / cosign
0 commit comments