Author

Jacek Galowicz

h-index 3 View on Semantic Scholar

We have 1 of 4 papers

We haven’t gathered this author’s papers yet. Follow them and we’ll fetch their work.

Not the right person? Other researchers publish under this name.

Bit-for-Bit How we built a Sovereign, Reproducible Container Supply Chain for DevGuard

This paper presents how the DevGuard project rebuilt its OCI container pipeline around reproducible Nix builds and independent dual-platform digest verification, and argues that independently reproducible container digests provide a stronger integrity guarantee against build tampering than provenance alone.

Tim Bastin, Lömi GmbH, Jacek Galowicz · 0 citations