Join us

ContentUpdates and recent posts about Sigstore..
Link
@devopslinks shared a link, 1 month ago
FAUN.dev()

SSH has no Host header

A dev built a custom SSH proxy that punches through IPv4 limits without handing out public IPs like candy. Their trick:shared IPv4s with per-user relative IP mapping. It maps incoming SSH traffic to the right VM using thesource IPandpublic key combo. No Host header? No problem. They sidestep that ho.. read more  

Link
@devopslinks shared a link, 1 month ago
FAUN.dev()

Keeping Secrets Out of Logs

A new writeup lays out a layered plan to keep secrets out of logs, no silver bullets here, just ten solid "lead bullets" that actually stack. Think of it as defense in depth for log hygiene. Highlights include: Type-safe domain primitives for secrets, Taint-based static analysis, Read-once secret wr.. read more  

Keeping Secrets Out of Logs
News FAUN.dev() Team
@varbear shared an update, 1 month ago
FAUN.dev()

Go Developer Survey Is Out: What 5,379 Go Developers Actually Want Next

Amazon Web Services Go Visual Studio Code

The 2025 Go Developer Survey reveals developers' desire for better best practices, enhanced standard library usage, and modernized tooling. AI-powered development tools are common, yet satisfaction is moderate due to quality concerns. Most respondents are experienced developers in the tech industry, highlighting challenges like ensuring code quality and finding reliable modules.

Go Developer Survey Is Out: What 5,379 Go Developers Actually Want Next
News FAUN.dev() Team Trending
@kala shared an update, 1 month ago
FAUN.dev()

Qwen3-TTS Series Released: This Open-Source Model Can Clone Your Voice in 3 Seconds

The Qwen3-TTS series introduces open-source models for speech generation, voice design, and cloning, available in 1.7B and 0.6B sizes. These models support 10 languages and offer features like rapid voice cloning and style control. They excel in multilingual capabilities and efficient speech signal processing.

Qwen3-TTS Series Released: This Open-Source Model Can Clone Your Voice in 3 Seconds
News FAUN.dev() Team Trending
@devopslinks shared an update, 1 month ago
FAUN.dev()

The Cloud Native Tipping Point: What 689 Companies Just Revealed

Kubernetes Argo CD Flux GitHub Actions

The CNCF Annual Cloud Native Survey reveals 98% of organizations now use cloud native technologies, with Kubernetes playing a crucial role in AI infrastructure. Multi-cloud and hybrid strategies are prevalent, and the main challenge has shifted to cultural changes within development teams.

The Cloud Native Tipping Point: What 689 Companies Just Revealed
Story
@laura_garcia shared a post, 1 month, 1 week ago
Software Developer, RELIANOID

Why High Availability for Skype for Business really matters 🔍

Downtime in enterprise communications is not an option. In our article, we explain why High Availability is critical for Skype for Business and how RELIANOID ensures continuous, secure, and scalable communications with advanced load balancing and failover solutions. 👉 Read it here and keep your comm..

Story FAUN.dev() Team Trending
@eon01 shared a post, 1 month, 1 week ago
Founder, FAUN.dev

Portainer: Podman environment option doesn't support Docker environments

Docker Portainer

During a recent training session I was leading, I watched a room full of sharp engineers do what engineers do best: follow instructions precisely. We installedPortainertogether, step by step, expecting the usual smooth glide into the world of container management. Instead, we hit a wall. A small one..

Story
@laura_garcia shared a post, 1 month, 1 week ago
Software Developer, RELIANOID

🔐 Cybertech Global TLV 2026 | Tel Aviv

January 26–28, 2026 One of the world’s leading cybersecurity events is back! Cybertech Global brings together global cyber leaders, innovators, and decision-makers at the heart of Israel’s tech ecosystem. 👉 RELIANOID will be there supporting secure, resilient digital infrastructures. #CybertechTL..

cybertech_global_tel_aviv_2026_relianoid
Story
@sancharini shared a post, 1 month, 1 week ago

Black Box Testing Strategies for Modern Web Applications

Explore effective black box testing strategies for modern web applications. Learn how to validate user workflows, APIs, asynchronous behavior, and security while minimizing flaky tests.

Black Box Testing Strategies for Modern Web Applications
Story Keploy Team
@sancharini shared a post, 1 month, 1 week ago

How to Combine Monkey Testing With Structured Test Automation?

Explore a practical approach to combining monkey testing with structured test automation, including smart test design, observability, and risk-based execution.

How to Combine Monkey Testing With Structured Test Automation?
Sigstore is an open source initiative designed to make software artifact signing and verification simple, automatic, and widely accessible. Its primary goal is to improve software supply chain security by enabling developers and organizations to cryptographically prove the origin and integrity of the software they build and distribute.

At its core, sigstore removes many of the traditional barriers associated with code signing. Instead of managing long-lived private keys manually, sigstore supports keyless signing, where identities are issued dynamically using OpenID Connect (OIDC) providers such as GitHub Actions, Google, or Microsoft. This dramatically lowers operational complexity and reduces the risk of key compromise.

The sigstore ecosystem is composed of several key components:

- Cosign: A tool for signing, verifying, and storing signatures for container images and other artifacts. Signatures are stored alongside artifacts in OCI registries, rather than embedded in them.

- Fulcio: A certificate authority that issues short-lived X.509 certificates based on OIDC identities, enabling keyless signing.

- Rekor: A transparency log that records signing events in an append-only, tamper-evident ledger. This provides public auditability and detection of suspicious or malicious signing activity.

Together, these components allow anyone to verify who built an artifact, when it was built, and whether it has been tampered with, using publicly verifiable cryptographic proofs. This aligns closely with modern supply chain security practices such as SLSA (Supply-chain Levels for Software Artifacts).

sigstore is widely adopted in the cloud-native ecosystem and integrates with tools like Kubernetes, container registries, CI/CD pipelines, and package managers. It is commonly used to sign container images, Helm charts, binaries, and SBOMs, and is increasingly becoming a baseline security requirement for production software delivery.

The project is governed by the OpenSSF (Open Source Security Foundation) and supported by major industry players.