Join us

ContentUpdates and recent posts about Sigstore..
 Activity
@abdelbxl started using tool Vagrant , 2 weeks, 2 days ago.
 Activity
@abdelbxl started using tool Ubuntu , 2 weeks, 2 days ago.
 Activity
@abdelbxl started using tool Terraform , 2 weeks, 2 days ago.
Story
@laura_garcia shared a post, 2 weeks, 2 days ago
Software Developer, RELIANOID

Pink26: ITSM – The Next Generation 🚀

📍 February 16–18, 2026 | Las Vegas The future of IT Service Management starts here. Pink26 brings together global IT leaders for a powerful mix of innovation, learning, and real-world transformation — inspired by the spirit of Star Trek: The Next Generation. From ITSM and DevOps to AI, Agile, and Ex..

pink26 las vegas relianoid
Story
@shubham321 shared a post, 2 weeks, 3 days ago
Software engineer, Keploy

Latency Test Guide: How to Boost App Speed and Improve UX

Did you know 100ms of lag can cost you 1% in sales? Learn how to master the latency test to isolate network, application, and database bottlenecks for a snappier, more reliable user experience

Latency testing (2)
Story
@laura_garcia shared a post, 2 weeks, 3 days ago
Software Developer, RELIANOID

🔁 Resharing insights from our CEO on the next decade of cybersecurity (2026–2036)

🔁 Resharing insights from our CEO on the next decade of cybersecurity (2026–2036) Cybersecurity is not heading toward a single dramatic disruption. It is undergoing a structural transformation. In her latest analysis, our CEO outlines the fundamental shifts that will define the next ten years: 🔐 ..

Story Keploy Team Trending
@sancharini shared a post, 2 weeks, 3 days ago

Delta Testing in Agile Releases: How to Validate Changes Without Retesting Everything?

Learn how delta testing helps Agile teams validate code changes efficiently, reduce regression scope, and accelerate CI/CD releases without retesting everything.

Delta Testing in Software Testing
Story
@laura_garcia shared a post, 2 weeks, 4 days ago
Software Developer, RELIANOID

Post-Quantum Cryptography is no longer theoretical. It’s strategic.

Quantum computing will eventually break RSA and ECC — the foundations of today’s secure communications. The industry is already preparing for “Q-Day,” with NIST standardizing algorithms like CRYSTALS-Kyber and Dilithium. We are entering a hybrid era that demands crypto agility. At RELIANOID, we’re p..

Blog Post-Quantum Cryptography
News FAUN.dev() Team Trending
@devopslinks shared an update, 2 weeks, 5 days ago
FAUN.dev()

Anthropic Claude: $20,000, 16 AI Agents, and a Compiler That Builds Linux

Docker git GNU/Linux The Linux Kernel Rust

Anthropic researcher Nicholas Carlini orchestrated 16 autonomous Claude agents working in parallel to build a 100,000-line C compiler in Rust. Using a custom harness for task coordination, testing, and conflict resolution, the agent team produced a compiler capable of building Linux 6.9 across multiple architectures.

Story
@laura_garcia shared a post, 2 weeks, 5 days ago
Software Developer, RELIANOID

Remember the AWS US-EAST-1 outage?

On October 20, 2025, AWS suffered a major outage in its most critical region (N. Virginia), causing global service disruptions for nearly 24 hours and impacting 140+ services. - No cyberattack involved. - The root cause was a DNS resolution failure in DynamoDB, triggering cascading issues across EC2..

aws outage
Sigstore is an open source initiative designed to make software artifact signing and verification simple, automatic, and widely accessible. Its primary goal is to improve software supply chain security by enabling developers and organizations to cryptographically prove the origin and integrity of the software they build and distribute.

At its core, sigstore removes many of the traditional barriers associated with code signing. Instead of managing long-lived private keys manually, sigstore supports keyless signing, where identities are issued dynamically using OpenID Connect (OIDC) providers such as GitHub Actions, Google, or Microsoft. This dramatically lowers operational complexity and reduces the risk of key compromise.

The sigstore ecosystem is composed of several key components:

- Cosign: A tool for signing, verifying, and storing signatures for container images and other artifacts. Signatures are stored alongside artifacts in OCI registries, rather than embedded in them.

- Fulcio: A certificate authority that issues short-lived X.509 certificates based on OIDC identities, enabling keyless signing.

- Rekor: A transparency log that records signing events in an append-only, tamper-evident ledger. This provides public auditability and detection of suspicious or malicious signing activity.

Together, these components allow anyone to verify who built an artifact, when it was built, and whether it has been tampered with, using publicly verifiable cryptographic proofs. This aligns closely with modern supply chain security practices such as SLSA (Supply-chain Levels for Software Artifacts).

sigstore is widely adopted in the cloud-native ecosystem and integrates with tools like Kubernetes, container registries, CI/CD pipelines, and package managers. It is commonly used to sign container images, Helm charts, binaries, and SBOMs, and is increasingly becoming a baseline security requirement for production software delivery.

The project is governed by the OpenSSF (Open Source Security Foundation) and supported by major industry players.