Comment on NPM Provenance Public BetaparentComments−jobby233ySCITT is pretty much just a late copy / paste of what sigstore has already done, save swapping out COSE for X509.
Comments
SCITT is pretty much just a late copy / paste of what sigstore has already done, save swapping out COSE for X509.