pub fn verify_section(
status: &StatusReport,
remote: &str,
sigstore: Option<(&str, &str)>,
) -> Option<String>Expand description
How a reviewer checks the attestations themselves, when there are any.
sigstore is the identity and issuer the project says sign: printed
for the reviewer to confirm, never trusted on the project’s word.