Sigstore & in-toto

Gitian

Gitian is a secure software distribution method that ensures trusted binaries through a deterministic build process.

About

Gitian provides a method for secure software distribution, allowing users to download verified binaries created by multiple builders. By employing a deterministic build process, it ensures that identical binaries are produced, which can be signed by various parties to confirm their integrity. This approach mitigates the risk of tampering and eliminates the build and distribution process as a single point of failure, making it a reliable option for software upgrades.

Resources & Links

Related Categories