Enhance README with attestation visibility details

This commit is contained in:
Max Goedjen 2025-08-23 15:05:28 -07:00 committed by GitHub
parent d70a9b8303
commit 5a63313d0f
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

View File

@ -52,7 +52,7 @@ There's a [FAQ here](FAQ.md).
Builds are produced by GitHub Actions with an auditable build and release generation process.
#### Attestated Releases
Starting with Secretive 3.0, builds are attestd using [GitHub Artifact Attestation](https://docs.github.com/en/actions/concepts/security/artifact-attestations).
Starting with Secretive 3.0, builds are attestd using [GitHub Artifact Attestation](https://docs.github.com/en/actions/concepts/security/artifact-attestations). Attestations are viewable in the build log for a build, and also on the [main attestation page](https://github.com/maxgoedjen/secretive/attestations).
### A Note Around Code Signing and Keychains