Updates and recent posts about Sigstore..

Posts
Description

That's all about @Sigstore — explore more posts below...

Story

@laura_garcia shared a post, 13 hours ago

Software Developer, RELIANOID

DevOpsCon Amsterdam 2026

- 𝗗𝗲𝘃𝗢𝗽𝘀𝗖𝗼𝗻 𝗔𝗺𝘀𝘁𝗲𝗿𝗱𝗮𝗺 𝟮𝟬𝟮𝟲 𝗶𝘀 𝗷𝘂𝘀𝘁 𝗮𝗿𝗼𝘂𝗻𝗱 𝘁𝗵𝗲 𝗰𝗼𝗿𝗻𝗲𝗿! - Amsterdam, Netherlands April 20–24, 2026 Simplify complexity, amplify agility, and accelerate innovation. Join DevOpsCon Amsterdam 2026 — one of the leading conferences for professionals working with CI/CD, Kubernetes, Platform Engineering, ..

Story WrapPixel Team

@sanjayjoshi shared a post, 1 day, 15 hours ago

10+ Shadcn Table Components, Blocks & Tools

A curated list of Shadcn table components and blocks you can use in React and Next.js projects to build clean, flexible, and production-ready data tables faster.

Story Keploy Team

@sancharini shared a post, 1 day, 17 hours ago

Black Box Testing Techniques to Improve Test Coverage

Learn black box testing techniques to improve test coverage. Explore methods like equivalence partitioning, boundary value analysis, and more with practical examples.

Story

@laura_garcia shared a post, 1 day, 18 hours ago

Software Developer, RELIANOID

𝗪𝗼𝗿𝗹𝗱 𝗤𝘂𝗮𝗻𝘁𝘂𝗺 𝗗𝗮𝘆

🚀 𝗪𝗼𝗿𝗹𝗱 𝗤𝘂𝗮𝗻𝘁𝘂𝗺 𝗗𝗮𝘆 𝗶𝘀 𝗵𝗲𝗿𝗲… and it’s not just science fiction anymore. Quantum computing is rapidly moving from theory to reality—and with it comes a 𝗺𝗮𝘀𝘀𝗶𝘃𝗲 𝘀𝗵𝗶𝗳𝘁 𝗶𝗻 𝗰𝘆𝗯𝗲𝗿𝘀𝗲𝗰𝘂𝗿𝗶𝘁𝘆 that organizations simply can’t ignore. Here’s the uncomfortable truth: 👉 The same technology that promises breakthrou..

Link

@hamzmu shared a link, 2 days, 10 hours ago

Fellow, Rootly

Using Graphify to turn Incident Data into a Knowledge Graph

Karpathy said we should build LLM knowledge bases. 48 hours later made Graphify was made: one command, full semantic knowledge graph.

We applied the idea to incident data turning them into a queryable and interactable semantic graph. This lets us see past fixes, predict failures, cluster services, cut alert noise, and reveal team load in seconds.

If you’re using Rootly, here is a small plugin to explore your incident data.

Check it out: github.com/Rootly-AI-Labs/rootly-graphify-importer

Interactive knowledge graph visualization of incident management data showing clustered services, alerts, and responders with connected nodes and relationships in Graphify

Story

@laura_garcia shared a post, 2 days, 11 hours ago

Software Developer, RELIANOID

Strengthen Your MFA with Google Authenticator and RELIANOID

🔐 Strengthen Your MFA with Google Authenticator and RELIANOID At RELIANOID, we take authentication seriously. We've just published a new technical guide on how to integrate Google Authenticator into the RELIANOID MFA Portal, using Active Directory or LDAP to manage user secrets. ✅ Understand TOTP vs..

2FA with AD_LDAP and Google Authenticator

Activity

@roock started using tool Terraform , 5 days, 4 hours ago.

Activity

@roock started using tool Python , 5 days, 4 hours ago.

Activity

@roock started using tool Puppet , 5 days, 4 hours ago.

Activity

@roock started using tool PostgreSQL , 5 days, 4 hours ago.

Sigstore is an open source initiative designed to make software artifact signing and verification simple, automatic, and widely accessible. Its primary goal is to improve software supply chain security by enabling developers and organizations to cryptographically prove the origin and integrity of the software they build and distribute.

At its core, sigstore removes many of the traditional barriers associated with code signing. Instead of managing long-lived private keys manually, sigstore supports keyless signing, where identities are issued dynamically using OpenID Connect (OIDC) providers such as GitHub Actions, Google, or Microsoft. This dramatically lowers operational complexity and reduces the risk of key compromise.

The sigstore ecosystem is composed of several key components:

- Cosign: A tool for signing, verifying, and storing signatures for container images and other artifacts. Signatures are stored alongside artifacts in OCI registries, rather than embedded in them.

- Fulcio: A certificate authority that issues short-lived X.509 certificates based on OIDC identities, enabling keyless signing.

- Rekor: A transparency log that records signing events in an append-only, tamper-evident ledger. This provides public auditability and detection of suspicious or malicious signing activity.

Together, these components allow anyone to verify who built an artifact, when it was built, and whether it has been tampered with, using publicly verifiable cryptographic proofs. This aligns closely with modern supply chain security practices such as SLSA (Supply-chain Levels for Software Artifacts).

sigstore is widely adopted in the cloud-native ecosystem and integrates with tools like Kubernetes, container registries, CI/CD pipelines, and package managers. It is commonly used to sign container images, Helm charts, binaries, and SBOMs, and is increasingly becoming a baseline security requirement for production software delivery.

The project is governed by the OpenSSF (Open Source Security Foundation) and supported by major industry players.