initial commit
This commit is contained in:
commit
5045552570
|
@ -0,0 +1,8 @@
|
|||
# SourceID
|
||||
|
||||
SourceId ensures that source code integrity is verifiable. It prevents tampering of archives and other formats used for delivering source code by standardizing code and generating a hash-based fingerprint of the tree which includes all essential files.
|
||||
|
||||
## Mitigated Risks
|
||||
|
||||
* Malicious code can be introduced during creation of archival formats such as tar-balls
|
||||
* Pre-compiled binaries and code can obfuscate malicious code
|
Loading…
Reference in New Issue