We're taking supply chain security seriously for the Conda ecosystem. That's why we integrate deeply with the @projectsigstore ecosystem for attestation – soon coming to recipes as well to validate source code (sdist, github release) attestations.

2 likes 0 replies