Sign in Sign up
cargo

holger-provenance

Holger's provenance verifier: DSSE + in-toto + SLSA provenance, Sigstore bundles, PyPI PEP 740 attestations, npm provenance and cosign image signatures and attestations, verified OFFLINE against a trust policy and a pinned Sigstore trust root that crosses the airgap as a signed holger.update-bundle/v1. Network-free.

cargo View on Cargo

Activity

Latest release
1d ago
Total releases
1
Cadence
—
Last 12 months
1

Details

License
unknown
First release
Oct 29, 2026
Releases
Version Released
2.0.0 initial