Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Hey stanekTM!👋, Jude here: MIT 2014 (Applied Plasma Physics) & Twitter 2021 (Machine learning). I've been working on this tool to enable developers to digitally sign their source code and track it across the entire software supply-chain (e.g. github, aws, gitlab, linode, azure, etc.). Still perfecting it so feel free offer feeback or flat out tell me 'this sucks'😂 (FYI:working on an intuitive demo). Hashes are verified via a blockchain (filecoin) node for transparency but only you, the owner, manage the private key. Simply compare the byte encrypted signature in your yml with the hash written to your blockchain node. If they ever differ you know to escalate. See the stanekTM-digital-copyright-instructions.yml for complete instructions. Feel free to contact me directly to review any questions before accepting. ~~Best: [email protected]