Painless Docker - 2nd Edition
A Comprehensive Guide to Mastering Docker and its Ecosystem
Updates and recent posts about Sigstore.. Course
@eon01 published a course, 2 weeks, 6 days ago
Founder, FAUN.dev
Story
@laura_garcia shared a post, 2 weeks, 6 days ago
Software Developer, RELIANOID
🚀 FinovateEurope 2026
📍 London, UK | 🗓️ 10–11 February 2026 Market-ready innovations. Executive-level networking. Inspiring insights. FinovateEurope brings together banking leaders, fintech innovators, investors, and technology providers to shape the future of financial services at a critical moment for the global fint..
Activity
@jordanunix posted an event DevOpsDayLA at SCALE23x The Southern California Linux and Open Source Expo by DevOpsDayLA , 3 weeks ago.
News FAUN.dev() Team Trending
@kala shared an update, 3 weeks ago
FAUN.dev()
This Is the First AI That Helped Build Itself - Meet GPT-5.3-Codex
GPT-5.3-Codex, an advanced model, enhances coding performance and reasoning, operating 25% faster than its predecessor. It excels in industry benchmarks, supports the software lifecycle, and can autonomously build complex applications. The model is available on multiple platforms with plans for API access.
Activity
@kala added a new tool GPT-5.3-Codex , 3 weeks ago.
Story
@laura_garcia shared a post, 3 weeks, 2 days ago
Software Developer, RELIANOID
🔐 CISO Sydney 2026
📍 Sydney, Australia | 🗓 10–11 February 2026 CISO Sydney returns for its 5th edition, bringing together New South Wales’ most senior Information Security leaders to explore how cybersecurity can truly enable business growth. From AI-driven threats and shared risk responsibility to culture-first secur..
Story
@laura_garcia shared a post, 3 weeks, 3 days ago
Software Developer, RELIANOID
Want to deploy RELIANOID Load Balancer Enterprise Edition v8 on AWS using Terraform in a clean, automated way?
We’ve got you covered. In this step-by-step guide, you’ll learn how to: Use the official Terraform module from the Terraform Registry Automatically provision VPC, subnet, security groups, and EC2 Deploy the RELIANOID Enterprise Edition AMI Access the VM via SSH and Web GUI Easily destroy all resourc..
Story Keploy Team Trending
@sancharini shared a post, 3 weeks, 3 days ago
Interpreting Software Testing Metrics Beyond Dashboards
Learn how to interpret software testing metrics beyond dashboards, turning raw data into actionable insights that improve release decisions and reduce risk.
Story
@idjuric660 shared a post, 3 weeks, 4 days ago
Technical Content Writer, Mailtrap
5 Best Email API for Python Developers Tested & Compared
The best email APIs for Python developers are Mailtrap, Mailgun, SendGrid, Amazon SES, and Postmark. SDK quality & framework compatibility All five providers offerPythonSDKs and they’re compatible with popular frameworks. I tested each withDjango,Flask, and FastAPI to assess real-world integration. ..
At its core, sigstore removes many of the traditional barriers associated with code signing. Instead of managing long-lived private keys manually, sigstore supports keyless signing, where identities are issued dynamically using OpenID Connect (OIDC) providers such as GitHub Actions, Google, or Microsoft. This dramatically lowers operational complexity and reduces the risk of key compromise.
The sigstore ecosystem is composed of several key components:
- Cosign: A tool for signing, verifying, and storing signatures for container images and other artifacts. Signatures are stored alongside artifacts in OCI registries, rather than embedded in them.
- Fulcio: A certificate authority that issues short-lived X.509 certificates based on OIDC identities, enabling keyless signing.
- Rekor: A transparency log that records signing events in an append-only, tamper-evident ledger. This provides public auditability and detection of suspicious or malicious signing activity.
Together, these components allow anyone to verify who built an artifact, when it was built, and whether it has been tampered with, using publicly verifiable cryptographic proofs. This aligns closely with modern supply chain security practices such as SLSA (Supply-chain Levels for Software Artifacts).
sigstore is widely adopted in the cloud-native ecosystem and integrates with tools like Kubernetes, container registries, CI/CD pipelines, and package managers. It is commonly used to sign container images, Helm charts, binaries, and SBOMs, and is increasingly becoming a baseline security requirement for production software delivery.
The project is governed by the OpenSSF (Open Source Security Foundation) and supported by major industry players.
