Holger

Immutable artifact repository in pure Rust

reading the server …

brought to you by Vetra AB & Ignalina ApS

Release signing

Holger's releases are signed with an ECDSA P-256 key made on the owner's YubiKey, which attests on the device that the key was generated there and cannot leave it. Key id d24d3785e8281bcd37e8f2c40a3a85e8152d3ce2200a5c929a1a5ca636e8249e. The key, its attestation and how to verify a release: slsa/ in holger and slsa/ in gunnar (the same key).