Join us

ContentUpdates and recent posts about Sigstore..
Story
@laura_garcia shared a post, 2ย months, 3ย weeks ago
Software Developer, RELIANOID

Deploy RELIANOID on Azure in minutes

๐Ÿš€ Deploy RELIANOID on Azure in minutes Looking to automate your infrastructure? Our latest guide shows how to deploy ๐—ฅ๐—˜๐—Ÿ๐—œ๐—”๐—ก๐—ข๐—œ๐—— ๐—Ÿ๐—ผ๐—ฎ๐—ฑ ๐—•๐—ฎ๐—น๐—ฎ๐—ป๐—ฐ๐—ฒ๐—ฟ ๐—˜๐—ป๐˜๐—ฒ๐—ฟ๐—ฝ๐—ฟ๐—ถ๐˜€๐—ฒ ๐—˜๐—ฑ๐—ถ๐˜๐—ถ๐—ผ๐—ป ๐˜ƒ๐Ÿด ๐—ผ๐—ป ๐— ๐—ถ๐—ฐ๐—ฟ๐—ผ๐˜€๐—ผ๐—ณ๐˜ ๐—”๐˜‡๐˜‚๐—ฟ๐—ฒ ๐˜‚๐˜€๐—ถ๐—ป๐—ด ๐—ง๐—ฒ๐—ฟ๐—ฟ๐—ฎ๐—ณ๐—ผ๐—ฟ๐—บ โ€” fast, simple, and fully automated. ๐Ÿ’ก What youโ€™ll get: - End-to-end deployment (VM, network, IP, secu..

terraform_relianoid_enterprise_azure_img2
ย Activity
@jillelliott created an organization eSiteWorld TechnoLabs Pvt. Ltd. , 2ย months, 3ย weeks ago.
ย Activity
@aarroondiazz created an organization Gojek App Clone , 2ย months, 3ย weeks ago.
Story
@laura_garcia shared a post, 2ย months, 3ย weeks ago
Software Developer, RELIANOID

The cost of a data breach? Everything.

๐Ÿšจ The cost of a data breach? Everything. ๐Ÿšจ 23andMeโ€™s recent bankruptcy after a devastating data breach is a wake-up call for every business handling sensitive information. Millions of users' DNA data is now at risk of being sold, all because of inadequate security measures. A single breach can lead ..

ย Activity
@cubeapm created an organization CubeAPM , 2ย months, 3ย weeks ago.
Story
@laura_garcia shared a post, 2ย months, 4ย weeks ago
Software Developer, RELIANOID

๐—–๐—ฉ๐—˜-๐Ÿฎ๐Ÿฌ๐Ÿฎ๐Ÿฒ-๐Ÿฎ๐Ÿฏ๐Ÿญ๐Ÿญ๐Ÿฎ: ๐—ก๐—ฉ๐— ๐—ฒ/๐—ง๐—–๐—ฃ ๐—ž๐—ฒ๐—ฟ๐—ป๐—ฒ๐—น ๐——๐—ผ๐—ฆ ๐—ฉ๐—ฒ๐—ฐ๐˜๐—ผ๐—ฟ โ€“ ๐—ค๐˜‚๐—ถ๐—ฐ๐—ธ ๐—œ๐—ป๐˜€๐—ถ๐—ด๐—ต๐˜

๐Ÿ” ๐—–๐—ฉ๐—˜-๐Ÿฎ๐Ÿฌ๐Ÿฎ๐Ÿฒ-๐Ÿฎ๐Ÿฏ๐Ÿญ๐Ÿญ๐Ÿฎ: ๐—ก๐—ฉ๐— ๐—ฒ/๐—ง๐—–๐—ฃ ๐—ž๐—ฒ๐—ฟ๐—ป๐—ฒ๐—น ๐——๐—ผ๐—ฆ ๐—ฉ๐—ฒ๐—ฐ๐˜๐—ผ๐—ฟ โ€“ ๐—ค๐˜‚๐—ถ๐—ฐ๐—ธ ๐—œ๐—ป๐˜€๐—ถ๐—ด๐—ต๐˜ A new Linux kernel vulnerability (CVE-2026-23112) affects the NVMe/TCP target (nvmet-tcp), exposing systems to potential kernel crashes and Denial of Service (DoS) conditions. โš™๏ธ ๐—ช๐—ต๐—ฎ๐˜โ€™๐˜€ ๐—ต๐—ฎ๐—ฝ๐—ฝ๐—ฒ๐—ป๐—ถ๐—ป๐—ด? Improper validation in nvmet_tcp_build_pdu..

Knowledge base Troubleshooting - CVE-2026-23112 - relianoid
Story
@viktoriiagolovtseva shared a post, 2ย months, 4ย weeks ago

How to Launch Paid Ads: a Quick Guide With a Hands-on Checklist

Behind every high-performing paid ad campaign is a simple truth: success comes from preparation and optimization, not blind luck. With all the variety of ad formats and campaign types, the process can be broken down into 5 crucial stages. In this guide, we provide you with the most essential practic..

Zrzut ekranu 2026-03-25 133738
Story
@viktoriiagolovtseva shared a post, 2ย months, 4ย weeks ago

Post-mortem Incident Review

Why Structured Post-mortem Reviews Matter Security incidents, outages, and failures are inevitable, especially in fast-moving agile environments. But what separates high-performing teams from the rest is how they learn from them. A well-run incident postmortem (or post-mortem meeting) focuses on unc..

Zrzut ekranu 2026-03-23 190511
News FAUN.dev() Team
@kala shared an update, 2ย months, 4ย weeks ago
FAUN.dev()

A Meta AI Agent Posted Without Permission. Then Things Got Worse.

OpenClaw

A Meta AI agent posted to an internal forum without authorization, triggering a Sev 1 incident that exposed proprietary code and user data for two hours. The advice it gave was wrong. The engineer followed it anyway. This wasn't a one-off - autonomous agents now account for more than 1 in 8 enterprise AI breaches, and most organizations have no mechanism to stop them from acting beyond their intended scope.

ย Activity
Sigstore is an open source initiative designed to make software artifact signing and verification simple, automatic, and widely accessible. Its primary goal is to improve software supply chain security by enabling developers and organizations to cryptographically prove the origin and integrity of the software they build and distribute.

At its core, sigstore removes many of the traditional barriers associated with code signing. Instead of managing long-lived private keys manually, sigstore supports keyless signing, where identities are issued dynamically using OpenID Connect (OIDC) providers such as GitHub Actions, Google, or Microsoft. This dramatically lowers operational complexity and reduces the risk of key compromise.

The sigstore ecosystem is composed of several key components:

- Cosign: A tool for signing, verifying, and storing signatures for container images and other artifacts. Signatures are stored alongside artifacts in OCI registries, rather than embedded in them.

- Fulcio: A certificate authority that issues short-lived X.509 certificates based on OIDC identities, enabling keyless signing.

- Rekor: A transparency log that records signing events in an append-only, tamper-evident ledger. This provides public auditability and detection of suspicious or malicious signing activity.

Together, these components allow anyone to verify who built an artifact, when it was built, and whether it has been tampered with, using publicly verifiable cryptographic proofs. This aligns closely with modern supply chain security practices such as SLSA (Supply-chain Levels for Software Artifacts).

sigstore is widely adopted in the cloud-native ecosystem and integrates with tools like Kubernetes, container registries, CI/CD pipelines, and package managers. It is commonly used to sign container images, Helm charts, binaries, and SBOMs, and is increasingly becoming a baseline security requirement for production software delivery.

The project is governed by the OpenSSF (Open Source Security Foundation) and supported by major industry players.