supply-chain security for Rust
Why do you think that https://github.com/sigstore/gitsign is a good alternative to cargo-vet
supply-chain security for Rust
Why do you think that https://github.com/sigstore/gitsign is a good alternative to cargo-vet