Hacker News new | ask | show | jobs
Releasing Packages with a Valet Key: NPM, PyPI, and Beyond (byk.im)
1 points by BYK 188 days ago
1 comments

How we built a secure, auditable, and low-friction release system at Sentry that is resistant to supply-chain attacks like Shai-Hulud