Part 2: gittuf for Consumers

Verifying a repository against its security policy is a complicated task to do correctly. For the everyday software consumer, gittuf is designed to make this simple.

Next: Verification

Let’s take a look at how verification works.