Supply-chain security

As software supplychain security concerns and requirements grow, cargo-dist is commited to making compliance with policies and regulations as turnkey as possible.

If you have an integration you are looking for file an issue or join our Discord.

Signing

• Windows Codesigning
• 🔜 macOS Codesigning
• 🔜 Linux Codesigning
• 🔜 Sigstore Signing
• 🔜 Windows Trusted Signing

Attestation

• GitHub Attestation

SBOMs and Dependency Managers

• 🔜 cargo-CycloneDX
• 🔜 cargo-auditable

Software identification

• 🔜 Omnibor