Skip to content

Commit

Permalink
Update content/en/system_config/integration.md
Browse files Browse the repository at this point in the history
Co-authored-by: ltagliaferri <lisa.tagliaferri@gmail.com>
Signed-off-by: jonvnadelberg <121979961+jonvnadelberg@users.noreply.github.com>
  • Loading branch information
jonvnadelberg and ltagliaferri authored Nov 15, 2023
1 parent 75c05b3 commit de3181e
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion content/en/system_config/integration.md
Original file line number Diff line number Diff line change
Expand Up @@ -9,7 +9,7 @@ weight: 952

## Integration

One of the key tenets of the Sigstore community’s strategy has been to focus on open source package managers as our primary stakeholders. OSS package managers serve as a critical link in the overall software supply chain, both in the distribution of artifacts & metadata but also often as an implicitly trusted actor that is expected to curate content based on static and transient information. Package managers also typically create command line tools used to download, install and manage packages on systems in a variety of environments.
One of the key tenets of the Sigstore community’s strategy has been to focus on open source package managers as our primary stakeholders. OSS package managers serve as a critical link in the overall software supply chain, both in the distribution of artifacts and metadata, but also often as an implicitly trusted actor that is expected to curate content based on static and transient information. Package managers also typically create command line tools used to download, install and manage packages on systems in a variety of environments.

A package manager looking to adopt Sigstore as part of its artifact signing and verification workflows will generally follow these steps, adjusted appropriately to the nuances of the specific programming language and/or ecosystem:

Expand Down

0 comments on commit de3181e

Please sign in to comment.