From 40c8ce70c08372184103fc7ffe557f7a830e667b Mon Sep 17 00:00:00 2001 From: "A.J. Stein" Date: Tue, 26 Mar 2024 22:06:13 -0400 Subject: [PATCH] Add supply chain digital signatures for #51 --- related-efforts.md | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/related-efforts.md b/related-efforts.md index a3e22e6..27b5f32 100644 --- a/related-efforts.md +++ b/related-efforts.md @@ -19,3 +19,8 @@ Software and services that implement the SCITT architecture support a variety of - [SPDX](https://spdx.dev/) - [Software Identificatino Tags - SWID (ISO/IEC 19770-2:2015)](https://www.iso.org/standard/65666.html) - [CoSWID - Concise Software Identification Tags (RFC9393)](https://datatracker.ietf.org/doc/rfc9393/) + +### Digital Signatures + +- [OpenPubkey](https://www.bastionzero.com/openpubkey) +- [Sigstore](https://www.sigstore.dev/)