add a link to "how to verify attestation" to bottom of widget #1

Open
opened 2026-01-30 20:23:37 +00:00 by Ghost · 0 comments
Ghost commented 2026-01-30 20:23:37 +00:00 (Migrated from codeberg.org)

right now the widget checks the attestation signatures and such, but to verify, the user needs a way to ensure that the PCR hashes that are attested match ones that are associated with trusted code. To do this they need someone else or themselves to review the source code (to a desired level/degree/depth), and use caution verify

right now the widget checks the attestation signatures and such, but to verify, the user needs a way to ensure that the PCR hashes that are attested match ones that are associated with trusted code. To do this they need someone else or themselves to review the source code (to a desired level/degree/depth), and use `caution verify`
Sign in to join this conversation.
No labels
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
public/attestation-widget#1
No description provided.