b4b2ceb2fd
Previously we were fetching the public keys over the network, this method was not resilient against bad actors who take over one of our dependencies and publish malicious images with those keys.
4 lines
178 B
Text
4 lines
178 B
Text
-----BEGIN PUBLIC KEY-----
|
|
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAELIik8ZM9ytEYEy1OWPs17Af7OEFH
|
|
+WE9xOdw+1Bk04RudI7qGgbfp6FIFZSZ1qUzmvN2yRsJ911+eBxOtu+MNw==
|
|
-----END PUBLIC KEY-----
|