[Rpm-maint] [rpm-software-management/rpm] RPM v6 package format, first public draft for commenting (Discussion #2374)

[Zoran Regvart]

I wonder if there is room to include software supply chain attestation data in this version? I would like to see [SLSA Provenance](https://slsa.dev/spec/v1.0/provenance) and SBOM (e.g. [SPDX](https://github.com/in-toto/attestation/blob/main/spec/predicates/spdx.md)) support.

-- 
Reply to this email directly or view it on GitHub:
https://github.com/rpm-software-management/rpm/discussions/2374#discussioncomment-7042982
You are receiving this because you are subscribed to this thread.

Message ID: <rpm-software-management/rpm/repo-discussions/2374/comments/7042982 at github.com>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.rpm.org/pipermail/rpm-maint/attachments/20230919/0a47c036/attachment.html>