Blog
- Verify the provenance of your Composer dependencies
Sign and verify PHP package provenance with Sigstore and GitHub build attestations, end to end.
Sign and verify PHP package provenance with Sigstore and GitHub build attestations, end to end.