I think that the idea behind Sigstore is interesting and can be really useful for many developers. But it also adds a lot of tooling and services that have to be set up and maintained, so if a developer isn't developing on a major forge where it's handled for them, it's probably too burdensome to deploy for most people.
We need to come up with solutions that work for the nomadic indie developer as well.
=> More informations about this toot | View the thread
=> This profile with reblog | Go to bk2204@mastodon.social account This content has been proxied by September (ba2dc).Proxy Information
text/gemini