Downstream of: You shall use MSGH provisioning for all your releases or else you don't have the attestation that the whole world depends on in their "security" processes.
"Was it signed by github? Then it is good." lmao
But this causes friction if you do something out of the ordinary, and they definitely did that. Problem upon problem.
Downstream of: You shall use MSGH provisioning for all your releases or else you don't have the attestation that the whole world depends on in their "security" processes.
"Was it signed by github? Then it is good." lmao
But this causes friction if you do something out of the ordinary, and they definitely did that. Problem upon problem.