Skip to content

Author

Tim Bastin

We have 1 of 1 papers

We haven’t gathered this author’s papers yet. Follow them and we’ll fetch their work.

Not the right person? Other researchers publish under this name.

Bit-for-Bit How we built a Sovereign, Reproducible Container Supply Chain for DevGuard

This paper presents how the DevGuard project rebuilt its OCI container pipeline around reproducible Nix builds and independent dual-platform digest verification, and argues that independently reproducible container digests provide a stronger integrity guarantee against build tampering than provenance alone.

Tim Bastin, Lömi GmbH, Jacek Galowicz · 0 citations

We use cookies to run the site and, with your consent, for analytics and to show ads. See our Cookie Policy.