-
composer-attest-action
GitHub Action that attests your Composer package — tarball and the dist zipball Composer installs
k2gl/composer-attest-action is a GitHub Action that does exactly this — it attests both the tarball and the dist zipball. Drop it into a workflow that runs on version tags:
-
AppSignal
Monitoring that respects your time & budget. APM, error tracking, and dashboards for modern web apps. Ten-minute setup, transparent flat pricing, and support from engineers who actually use the product.
-
composer-attest
Composer plugin that verifies GitHub build-provenance attestations for the packages you install
k2gl/composer-attest is a Composer plugin that verifies these attestations as packages are downloaded:
-
In warn mode it reports and continues; in enforce it fails the install on a bad attestation. Under the hood it reuses k2gl/sigstore-verify, a pure-PHP Sigstore verifier that passes the official sigstore-conformance suite.
Related posts
-
Introducing bitget-php: a production-grade PHP and Laravel SDK for Bitget UTA v3
-
Building Robust Crypto Data Pipelines in PHP: Introducing the Token Terminal SDK
-
Mautic email deliverability: replace SMTP with the Symfony Mailer DSN transport
-
Model field keepers in Laravel with Larakeep
-
Move business logic out of your Laravel controllers with Laractions