Updates and recent posts about Sigstore..

Posts
Description

Activity

@harperelisecallahan started using tool PHP , 2 weeks, 1 day ago.

Activity

@harperelisecallahan started using tool Node.js , 2 weeks, 1 day ago.

Activity

@harperelisecallahan started using tool Magento , 2 weeks, 1 day ago.

Activity

@harperelisecallahan started using tool Laravel , 2 weeks, 1 day ago.

Activity

@harperelisecallahan started using tool Java , 2 weeks, 1 day ago.

Activity

@harperelisecallahan started using tool Angular , 2 weeks, 1 day ago.

Story

@viktoriiagolovtseva shared a post, 2 weeks, 3 days ago

Checklists in Confluence: A Simple Way to Bring Clarity to Project Work

Confluence has become a central space for documenting knowledge, feature plans, meeting notes, check-in reports, SOPs, and sprint summaries. But there is a challenge.

Confluence captures context well, but it doesn’t always drive action. A well-structured page can still leave a team wondering: “What’s actually happening with this?”

That’s where checklists solve the challenge. Being simple, repeatable, and visual, they help teams close the gap between writing something down and doing it.

But checklists only add value if they reflect reality. If they’re trackable, maintained, and visible to the right people.

Story Trending

@laura_garcia shared a post, 2 weeks, 4 days ago

Software Developer, RELIANOID

𝗠𝗲𝗱-𝗧𝗲𝗰𝗵 𝗘𝘅𝗽𝗼 𝟮𝟬𝟮𝟲

🏥 𝗗𝗿𝗶𝘃𝗶𝗻𝗴 𝗶𝗻𝗻𝗼𝘃𝗮𝘁𝗶𝗼𝗻 𝗶𝗻 𝗵𝗲𝗮𝗹𝘁𝗵𝗰𝗮𝗿𝗲 𝗶𝗻𝗳𝗿𝗮𝘀𝘁𝗿𝘂𝗰𝘁𝘂𝗿𝗲 𝗮𝘁 𝗠𝗲𝗱-𝗧𝗲𝗰𝗵 𝗘𝘅𝗽𝗼 𝟮𝟬𝟮𝟲 𝗥𝗘𝗟𝗜𝗔𝗡𝗢𝗜𝗗 is excited to join Med-Tech Expo 2026 in Birmingham on June 3–4 — the UK’s leading event for medical device manufacturing, digital health, and 𝗵𝗲𝗮𝗹𝘁𝗵𝗰𝗮𝗿𝗲 𝗶𝗻𝗻𝗼𝘃𝗮𝘁𝗶𝗼𝗻. As 𝗮𝗰𝘁𝗶𝘃𝗲 𝗰𝗼𝗹𝗹𝗮𝗯𝗼𝗿𝗮𝘁𝗼𝗿𝘀 𝗮𝗻𝗱 𝘀𝘂𝗽𝗽𝗹𝗶𝗲𝗿𝘀 𝘀𝘂𝗽𝗽𝗼𝗿𝘁𝗶𝗻𝗴 𝗶𝗻𝗻..

med_tech_event_2026_bormingham_uk_relianoid

Story

@laura_garcia shared a post, 2 weeks, 5 days ago

Software Developer, RELIANOID

𝗣𝗲𝗿𝗳𝗼𝗿𝗺𝗮𝗻𝗰𝗲 and 𝗿𝗲𝗹𝗶𝗮𝗯𝗶𝗹𝗶𝘁𝘆 through Load Balancing

🚀 𝗣𝗲𝗿𝗳𝗼𝗿𝗺𝗮𝗻𝗰𝗲 and 𝗿𝗲𝗹𝗶𝗮𝗯𝗶𝗹𝗶𝘁𝘆 are no longer optional — they are 𝙗𝙪𝙨𝙞𝙣𝙚𝙨𝙨-𝙘𝙧𝙞𝙩𝙞𝙘𝙖𝙡. Load balancing plays a key role in ensuring applications remain fast, available, and resilient, even under growing traffic demands. From intelligent traffic distribution to automatic failover and advanced health check..

Story

@laura_garcia shared a post, 2 weeks, 5 days ago

Software Developer, RELIANOID

nmap Command Cheatsheet

🔍 New technical guide: nmap Command Cheatsheet If you work with network security or system administration, this quick reference covers essential Nmap techniques—from SYN scans and service detection to OS fingerprinting and NSE scripts. 👉 Read the full article here: https://www.relianoid.com/resource..

Sigstore is an open source initiative designed to make software artifact signing and verification simple, automatic, and widely accessible. Its primary goal is to improve software supply chain security by enabling developers and organizations to cryptographically prove the origin and integrity of the software they build and distribute.

At its core, sigstore removes many of the traditional barriers associated with code signing. Instead of managing long-lived private keys manually, sigstore supports keyless signing, where identities are issued dynamically using OpenID Connect (OIDC) providers such as GitHub Actions, Google, or Microsoft. This dramatically lowers operational complexity and reduces the risk of key compromise.

The sigstore ecosystem is composed of several key components:

- Cosign: A tool for signing, verifying, and storing signatures for container images and other artifacts. Signatures are stored alongside artifacts in OCI registries, rather than embedded in them.

- Fulcio: A certificate authority that issues short-lived X.509 certificates based on OIDC identities, enabling keyless signing.

- Rekor: A transparency log that records signing events in an append-only, tamper-evident ledger. This provides public auditability and detection of suspicious or malicious signing activity.

Together, these components allow anyone to verify who built an artifact, when it was built, and whether it has been tampered with, using publicly verifiable cryptographic proofs. This aligns closely with modern supply chain security practices such as SLSA (Supply-chain Levels for Software Artifacts).

sigstore is widely adopted in the cloud-native ecosystem and integrates with tools like Kubernetes, container registries, CI/CD pipelines, and package managers. It is commonly used to sign container images, Helm charts, binaries, and SBOMs, and is increasingly becoming a baseline security requirement for production software delivery.

The project is governed by the OpenSSF (Open Source Security Foundation) and supported by major industry players.