Ben Selwyn-Smith comments

Repositories
Issues
Comments

Results 3 comments of


                                            Ben Selwyn-Smith

Use the Python bindings for in-toto/attestation

I looked into the library and feel that it is not suitable for our use case. The library exists to properly validate an artifact's provenance, rather than to verify the...

feat: verify whether the reported repository can be linked back to the artifact

Is there a plan to add unit testing and integration testing as part of this PR? @behnazh-w

feat(security): Add package name typosquatting detection

@AmineRaouane As a general comment: Please wait for reviewers to mark the issues they have raised as resolved. This way we can more easily ensure that an appropriate resolution has...