A non-profit, public good software signing & transparency service

Dan Lorenc in sigstore

Mar 10, 2021

Cosign — Signed Container Images

I’ve seen a lot of questions about signing container images in the last few months, and unfortunately…

1 response

Santiago Torres-Arias in sigstore

Jan 10, 2022

Celebrating 1,000,000 entries in Rekor

We’ve finally reached a million entries! We hit a million entries by the end of 2021:

Dan Lorenc in sigstore

Mar 29, 2021

What’s Next for Sigstore?

Project Update March 2021 — Building Trust!

Hayden Blauzvern in sigstore

Aug 2, 2022

Adopting Sigstore Incrementally

Developers, package maintainers, and enterprises that would like to adopt Sigstore may already sign…

developer-guy in sigstore

Mar 24, 2022

How to verify container images with Kyverno using KMS, Cosign, and Workload Identity

Luke Hinds in sigstore

Aug 31, 2021

Sigstore Project Update — August 2021

Welcome to our project update for August.

Dan Lorenc in sigstore

Mar 17, 2021

The Update Framework and You

Why does it need to be so TUF?

If you’re anything like me and spend time reading blog posts and GitHub discussions around how to securely package and release software, you’ve probably heard of The Update Framework. Unfortunately, if you’re actually…

1 response

Luke Hinds in sigstore

Nov 16, 2021

sigstore & the OpenSSF

A quick post based on the recent news of sigstore joining the OpenSSF and what this means.

Christoph Hamsen in sigstore

Apr 15, 2021

Two persons signing and verifying documents as an illustration for the Cosign-Connaisseur interplay for container image verification in Kubernetes.

Connaisseur meets Cosign

Verifying Container Image Signatures from an OCI Registry in Kubernetes

Asra Ali in sigstore

Jan 19, 2022

Sigstore: Bring-your-own sTUF with TUF

Authors: Hayden Blauzvern and Asra Ali, Google Open Source Security Team

About

sigstore

News and updates from Sigstore, the modern way to sign, verify and protect software. Learn more and join the open source community here: https://github.com/sigstore

More information

Followers

197

Elsewhere