Updates and recent posts about Sigstore..

Posts
Description

News FAUN.dev() Team

@varbear shared an update, 4 weeks ago

FAUN.dev()

New MCP Release v0.10.0 Supercharges AI-Assisted Web Development

#AI codi... #Model C... #perform... #Debuggi... #Chrome ...

Chrome DevTools MCP v0.10.0 unlocks deeper AI-powered debugging with new tools for DOM access, network request detection, page reload automation, performance insights, and snapshot saving.

Google Launches Chrome DevTools MCP Server Preview for AI-Driven Web Debugging

Activity

@varbear added a new tool chrome-devtools-mcp , 4 weeks ago.

News FAUN.dev() Team Trending

@varbear shared an update, 4 weeks ago

FAUN.dev()

AWS Lambda Gets Python 3.14: Faster, Smarter, and More Serverless-Friendly

#aws #Python ... #Lambda@... #AWS Lam...

Python 3.14 is now available in AWS Lambda, enabling developers to leverage new Python features for serverless applications.

AWS Lambda Gets Python 3.14: Faster, Smarter, and More Serverless-Friendly

News FAUN.dev() Team

@kaptain shared an update, 4 weeks ago

FAUN.dev()

The Most Absurd (and Brilliant) Kubernetes Cluster at KubeCon 2025

#kubecon #PETAFLO... #LattePa... #nvidia #kuberne...

Engineer Justin Garrison showcased a backpack-sized PETAFLOP Kubernetes cluster at KubeCon 2025, demonstrating localized AI capabilities without cloud reliance.

The Most Absurd (and Brilliant) Kubernetes Cluster at KubeCon 2025

Activity

@kaptain added a new tool Talos Linux , 4 weeks ago.

News FAUN.dev() Team Trending

@kaptain shared an update, 4 weeks ago

FAUN.dev()

Google Breaks Kubernetes Limits Again: Inside the 130,000-Node GKE Cluster

#GKE #Google ... #Google #AI #kuberne...

Google successfully operates a 130,000-node Kubernetes cluster to enhance GKE's scalability for AI workloads.

Control plane throughput: Sustaining up to 1,000 operations per second for both Pod creation and Pod binding during intense scheduling phases.

Activity

@kaptain added a new tool kueue , 4 weeks ago.

News FAUN.dev() Team

@devopslinks shared an update, 4 weeks ago

FAUN.dev()

Inside Cloudflare's Worst Outage Since 2019: How a Single Config File Broke the Internet

#Feature... #DDoS #Postmor... #cloudfl... #outage

A database permissions change led to a Cloudflare outage by creating an oversized feature file, causing network failures initially mistaken for a DDoS attack.

Inside Cloudflare's Worst Outage Since 2019: How a Single Config File Broke the Internet

News FAUN.dev() Team

@devopslinks shared an update, 4 weeks ago

FAUN.dev()

Valkey 9.0 Released: Faster Clusters, New TTL Controls, and Big Networking Gains

#scalabi... #Valkey #Valkey ... #Redis #open so...

Valkey 9.0 debuts with atomic slot migrations, hash field expiration, and improved cluster mode support, enhancing data management and scalability.

Valkey 9.0 Released: Faster Clusters, New TTL Controls, and Big Networking Gains

Activity

@devopslinks added a new tool Valkey , 4 weeks ago.

Sigstore is an open source initiative designed to make software artifact signing and verification simple, automatic, and widely accessible. Its primary goal is to improve software supply chain security by enabling developers and organizations to cryptographically prove the origin and integrity of the software they build and distribute.

At its core, sigstore removes many of the traditional barriers associated with code signing. Instead of managing long-lived private keys manually, sigstore supports keyless signing, where identities are issued dynamically using OpenID Connect (OIDC) providers such as GitHub Actions, Google, or Microsoft. This dramatically lowers operational complexity and reduces the risk of key compromise.

The sigstore ecosystem is composed of several key components:

- Cosign: A tool for signing, verifying, and storing signatures for container images and other artifacts. Signatures are stored alongside artifacts in OCI registries, rather than embedded in them.

- Fulcio: A certificate authority that issues short-lived X.509 certificates based on OIDC identities, enabling keyless signing.

- Rekor: A transparency log that records signing events in an append-only, tamper-evident ledger. This provides public auditability and detection of suspicious or malicious signing activity.

Together, these components allow anyone to verify who built an artifact, when it was built, and whether it has been tampered with, using publicly verifiable cryptographic proofs. This aligns closely with modern supply chain security practices such as SLSA (Supply-chain Levels for Software Artifacts).

sigstore is widely adopted in the cloud-native ecosystem and integrates with tools like Kubernetes, container registries, CI/CD pipelines, and package managers. It is commonly used to sign container images, Helm charts, binaries, and SBOMs, and is increasingly becoming a baseline security requirement for production software delivery.

The project is governed by the OpenSSF (Open Source Security Foundation) and supported by major industry players.

FAUN.amplify()

👋 Developers trust FAUN.dev() to stay up to date. Sponsor us and put your product, service, or event in front of thousands of highly engaged developers.!

> Sponsor

FAUN.hbc() - Humans Behind Code

🧑‍💻 Are you developing a project? Join the "Humans Behind Code" project and showcase your work to the world!

> Apply