Skip to content

Document JS Libraries provenance and attestations with cosign verification #3036

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
angela-zhang merged 1 commit into from
Mar 4, 2026

Document provenance and attestations for JavaScript libraries with co…

3d9cdd7
Select commit
Loading
Failed to load commit list.
Merged

Document JS Libraries provenance and attestations with cosign verification #3036

Document provenance and attestations for JavaScript libraries with co…
3d9cdd7
Select commit
Loading
Failed to load commit list.
Chainguard Enforce / Enforce - Commit Signing succeeded Mar 4, 2026 in 1s

Successfully verified commit signature.

CLAIM DESCRIPTION
✅ Found Git signature
✅ Validated Git signature
❌ Validated Rekor entry
✅ Allowed by policy

Details

View more details on Chainguard Enforce