Preflight

Preflight is a verification tool designed to help mitigate supply chain attacks by validating scripts and executables before execution. The tool addresses security concerns similar to those highlighted by incidents like the Codecov hack. The tool can be deployed through multiple distribution methods to ensure secure implementation: - Self-compilation from source code for maximum trust - Storage on private S3 buckets or internal artifact repositories - Direct integration into repositories (approximately 4MB in size) - Container-based builds using Go compilation Preflight is built in Go and can be compiled from source using standard Go tooling. The tool supports Alpine Linux containers and includes certificate authority support for secure operations. It integrates with curl and other common utilities for script verification workflows. The tool follows a trust-but-verify approach where organizations can build and maintain their own trusted binaries rather than relying on external distributions. This methodology helps establish a secure foundation for validating other software components in the development and deployment pipeline.