Hacker News new | ask | show | jobs
by aaron_m04 2939 days ago
Sounds like a good opportunity for integration with GPG, keybase, and other signing tools.
2 comments

I was surprised that there was no gitlab integration with keybase when I signed up last night to check it out. Not just to save me manually copying my key but for the cross-platform identity verification.
It's not that easy to solve in general. Usually these artifacts are built by CI so it'd have to sign them too (if they are not reproducible the you can't build them locally and check if they are the same). So a person that has admin access in CI can do that too.

Of course current design leaves much to be desired.