Releasing Packages with a Valet Key: NPM, PyPI, and Beyond(byk.im)
byk.im
Releasing Packages with a Valet Key: NPM, PyPI, and Beyond
https://byk.im/posts/releasing-packages/
1 comments
How we built a secure, auditable, and low-friction release system at Sentry that is resistant to supply-chain attacks like Shai-Hulud