ppkarwasz commented on PR #706:
URL: https://github.com/apache/commons-parent/pull/706#issuecomment-4435804996
It's more of a complement:
- apache/commons-release-plugin#422 allows us to create **Build** Provenance
attestations,
- this PR allows use to create **Source** Provenance attestations, which
give informations such as:
- who made the commit,
- what protections were in place,
- possibly who reviewed the commit.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
