
The new Google ‘Oss Rebuild’ Safety Project the verification of the supply chain
This week, Google’s open source security equipment “A new project to strengthen confidence in open source packages ecosystems” – Reproducing upstream artifacts. It includes automation to obtain declarative construction definitions, new “compilation observation and verification tools for security equipment and even” infrastructure definitions “to help organizations reconstruct, sign and distribute the origin by executing their…