1/ Even packages from @condaforge get a provenance snippet - as they contain information about the originating feedstock (but not signed using sigstore).
0 likes 1 replies
?
1/ Even packages from @condaforge get a provenance snippet - as they contain information about the originating feedstock (but not signed using sigstore).
0 likes 1 replies