sigstore: use pinned trusted root for verification #1125

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Draft

crazy-max wants to merge 3 commits into main from sigstore-local-trusted-root

+196 −73

Draft

sigstore: use pinned trusted root for verification #1125

ci: update Sigstore trusted root in dependency workflow

DCO / DCO succeeded May 18, 2026 in 0s

DCO

All commits are signed off!

View more details on DCO