open-telemetry/opentelemetry-ruby-contrib
Use Supply Chain Security Features for Gems
オープン
#1,289 opened on 2024/12/05
help wantedkeep
Repository metrics
- Stars
- (135 個のスター)
- PR merge metrics
- (PR metrics pending)
説明
We must take action to reduce the risk of compromising Ruby Gems published from our repositories.
- Cryptographically Sign Gems: https://guides.rubygems.org/security/
- Create or obtain a certificate from the opentelemetry community
- Document the process for managing certs
- Sign gems as part of the release process
- Adopt Roles and stop sharing credentials: https://blog.rubygems.org/2024/11/07/maintainer-role.html
- Document the process for managing maintainers and owners to our RubyGems account