Poetry and SLSA
#8958
Replies: 1 comment 1 reply
-
I don't think there is any current work on this yet. I suspect it is a good thing to make available. There is some existing work around enabling this for python packages at https://sethmlarson.dev/python-and-slsa. If you are interested, feel free to create a new issue with the proposal and have a crack at a solution perhaps. Happy to help it along. |
Beta Was this translation helpful? Give feedback.
1 reply
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
-
It would seem that SLSA is a framework to make it safer to work with open source packages. Now it would also seem to have an integration with releases on github. However, the release procedure of poetry is quite nice and I started to wonder if someone has already had a look if the two could come together...
Beta Was this translation helpful? Give feedback.
All reactions