|
@__agwa | |||||
|
#Golang plans to publish hashes of module source code in a #CertificateTransparency-style log: blog.golang.org/modules2019
This will help assure Go programmers that they are downloading authentic copies of their dependencies. A good step towards securing the software supply chain.
|
||||||
|
||||||