Blog

• Verify your Composer dependencies' provenance 2026-07-05

  Sign and verify PHP package provenance with Sigstore and GitHub build attestations, end to end.