Updates and recent posts about Sigstore..

Posts
Description

Link

@devopslinks shared a link, 3 months ago

FAUN.dev()

California’s AB 1043 Could Regulate Every Linux Command, and the Open Source World Is Too Quiet

California'sAB 1043requires operating systems to collect age/DOB at account setup and expose anAPIthat returns anage bracket signal. Apps must request that signal on launch and restrict access by bracket. EffectiveJan 1, 2027, vague definitions could sweepapt,flatpak,snap, and package managers into .. read more

Link

@devopslinks shared a link, 3 months ago

FAUN.dev()

New Malware Highlights Increased Systematic Targeting of Network Infrastructure

The enterprise attack surface has changed, with threat actors increasingly targeting network infrastructure. Eclypsium recently captured new malware samples, including CondiBot and "Monaco," both impacting network devices such as Fortinet products. The rise in network device attacks poses serious th.. read more

Link

@devopslinks shared a link, 3 months ago

FAUN.dev()

How to Host your Own Email Server

This guide shows how to self-hostSMTPon a cheapVPS. It runs DockerizedPostfixand bundlesopendkimfor DKIM signing. It skipsIMAPand inbound SMTP and relies on registrar email forwarding. It configures reverse DNS plusSPFandDMARCDNS records. It checks port 25 reachability, maps host port 1587 to contai.. read more

News FAUN.dev() Team

@kaptain shared an update, 3 months ago

FAUN.dev()

The Safe Path Off Ingress-NGINX: Ingress2Gateway 1.0

#Ingress... #Ingress... #Migrati... #Annotat... #Gateway...

Ingress2Gateway 1.0 has been released to aid migration from Ingress-NGINX to Gateway API before its retirement in March 2026. The tool translates Ingress resources to Gateway API and highlights untranslatable configurations. The release features enhanced annotation support and thorough testing for reliable migration.

Story Trending

@laura_garcia shared a post, 3 months ago

Software Developer, RELIANOID

𝗪𝗵𝗮𝘁 𝗶𝘀 𝗚𝗼𝗼𝗴𝗹𝗲 𝗖𝗹𝗼𝘂𝗱 𝗣𝗹𝗮𝘁𝗳𝗼𝗿𝗺 (𝗚𝗖𝗣)?

Google Cloud Platform (GCP) delivers a powerful suite of compute, storage, networking, data, and AI/ML services—all running on Google’s global infrastructure. 🔹 𝗛𝗼𝘄 𝗶𝘁 𝘄𝗼𝗿𝗸𝘀 GCP is built around projects (for resource isolation and billing), with flexible networking via VPCs, and scalable compute opt..

Story

@laura_garcia shared a post, 3 months ago

Software Developer, RELIANOID

𝗜𝘀 𝘆𝗼𝘂𝗿 𝗰𝗼𝗺𝗺𝘂𝗻𝗶𝗰𝗮𝘁𝗶𝗼𝗻 𝗽𝗹𝗮𝘁𝗳𝗼𝗿𝗺 𝗿𝗲𝗮𝗱𝘆 𝗳𝗼𝗿 𝘇𝗲𝗿𝗼 𝗱𝗼𝘄𝗻𝘁𝗶𝗺𝗲?

🚨 𝗜𝘀 𝘆𝗼𝘂𝗿 𝗰𝗼𝗺𝗺𝘂𝗻𝗶𝗰𝗮𝘁𝗶𝗼𝗻 𝗽𝗹𝗮𝘁𝗳𝗼𝗿𝗺 𝗿𝗲𝗮𝗱𝘆 𝗳𝗼𝗿 𝘇𝗲𝗿𝗼 𝗱𝗼𝘄𝗻𝘁𝗶𝗺𝗲? For many enterprises, 𝗦𝗸𝘆𝗽𝗲 𝗳𝗼𝗿 𝗕𝘂𝘀𝗶𝗻𝗲𝘀𝘀 is still a critical pillar for daily operations — from internal collaboration to client interactions. But what happens when it goes down? 💥 Lost productivity 💥 Interrupted workflows 💥 Missed business o..

Story WrapPixel Team

@sanjayjoshi shared a post, 3 months ago

Building a Team Section or Page in 2026? You Must Check This

A strong team section helps build trust by showing the people behind your product.
It’s not just design it makes your product feel real.

This article shares modern, ready-to-use team sections and pages you can quickly use in your projects.

Story

@laura_garcia shared a post, 3 months ago

Software Developer, RELIANOID

CloudFest 2026 is calling

🚀 CloudFest 2026 is calling March 23–26 | Europa-Park 10,000+ minds. 80+ countries. One place where the future of the internet is built. From cutting-edge cloud innovation to legendary networking — this isn’t just an event, it’s the experience. 👉 Meet us there and discover how RELIANOID is powering ..

Activity

@sanjayjoshi added a new tool Shadcn Space , 3 months ago.

Activity

@sanjayjoshi created an organization WrapPixel , 3 months ago.

Sigstore is an open source initiative designed to make software artifact signing and verification simple, automatic, and widely accessible. Its primary goal is to improve software supply chain security by enabling developers and organizations to cryptographically prove the origin and integrity of the software they build and distribute.

At its core, sigstore removes many of the traditional barriers associated with code signing. Instead of managing long-lived private keys manually, sigstore supports keyless signing, where identities are issued dynamically using OpenID Connect (OIDC) providers such as GitHub Actions, Google, or Microsoft. This dramatically lowers operational complexity and reduces the risk of key compromise.

The sigstore ecosystem is composed of several key components:

- Cosign: A tool for signing, verifying, and storing signatures for container images and other artifacts. Signatures are stored alongside artifacts in OCI registries, rather than embedded in them.

- Fulcio: A certificate authority that issues short-lived X.509 certificates based on OIDC identities, enabling keyless signing.

- Rekor: A transparency log that records signing events in an append-only, tamper-evident ledger. This provides public auditability and detection of suspicious or malicious signing activity.

Together, these components allow anyone to verify who built an artifact, when it was built, and whether it has been tampered with, using publicly verifiable cryptographic proofs. This aligns closely with modern supply chain security practices such as SLSA (Supply-chain Levels for Software Artifacts).

sigstore is widely adopted in the cloud-native ecosystem and integrates with tools like Kubernetes, container registries, CI/CD pipelines, and package managers. It is commonly used to sign container images, Helm charts, binaries, and SBOMs, and is increasingly becoming a baseline security requirement for production software delivery.

The project is governed by the OpenSSF (Open Source Security Foundation) and supported by major industry players.