Join us

ContentUpdates and recent posts about Sigstore..
Link
@faun shared a link, 10 months, 1 week ago
FAUN.dev()

How to Reduce Technical Debt With Artificial Intelligence (AI)

Technical debt from outdated software slows down businesses, costingover $2.4 trillion annually in the U.S. Using AI in SaaS can smartly reduce debt, but beware AI-induced debt by implementing rigorous oversight and governance principles likeT.R.U.S.T. Responsible AI integration enhances SaaS scalab.. read more  

Link
@faun shared a link, 10 months, 1 week ago
FAUN.dev()

Hidden Complexities of Distributed SQL

Distributed SQL engines shine when it comes to wrangling scattered data. Their secret weapons?Push-down filtersandTopNtricks that slash data transfer and shrink processing time. They deftly juggle complex queries from multiple sources, without the whole data mess piling up. Even the humdinger of ope.. read more  

Hidden Complexities of Distributed SQL
Link
@faun shared a link, 10 months, 1 week ago
FAUN.dev()

New Amazon EC2 P6e-GB200 UltraServers accelerated by NVIDIA Grace Blackwell GPUs for the highest AI performance

Amazon EC2 P6e-GB200 UltraServersroar to life withNVIDIA Grace Blackwell. Imagine a beast with360 petaflopsof FP8 compute and13.4 TBof high-bandwidth memory. Hungry for speed? They deliver, with28.8 TbpsEFAv4 networking, ensuring lightning-fast data flow. And the GPUs chat like old friends, thanks t.. read more  

New Amazon EC2 P6e-GB200 UltraServers accelerated by NVIDIA Grace Blackwell GPUs for the highest AI performance
Link
@faun shared a link, 10 months, 1 week ago
FAUN.dev()

Why Policy as Code is a Game Changer for Platform Engineers

Policy as Code (PaC) isn't just another tech trend. It’s shaking up platform engineering. Get instant feedback, dodge production disasters, and automate compliance. It’s like a security blanket for self-service platforms. Enforcing those"golden paths"might actually keep things safe while innovation .. read more  

Why Policy as Code is a Game Changer for Platform Engineers
Link
@faun shared a link, 10 months, 1 week ago
FAUN.dev()

Local Chatbot RAG with FreeBSD Knowledge

Deepseek-r1crushes it for FreeBSD chatbots running locally on hefty GPUs. It dishes out adjustable precision, but don’t expect rubber-stamped approval... read more  

Link
@faun shared a link, 10 months, 1 week ago
FAUN.dev()

Netflix Tudum Architecture: from CQRS with Kafka to CQRS with RAW Hollow

RAW Hollow, Netflix's brainy in-memory database, torches Tudum's update lag by jamming full datasets right into app memory. This move guaranteesO(1)access time and rock-solidread-after-writeconsistency while flexing to juggle a whopping100 millionrecords... read more  

Netflix Tudum Architecture: from CQRS with Kafka to CQRS with RAW Hollow
Link
@faun shared a link, 10 months, 1 week ago
FAUN.dev()

Understanding Time Series Databases

Time series databasesoptimize storage, retrieval, and analysis of time-stamped data, offering high-speed ingestion and specialized analytics. TSDBs are designed for efficiency and scalability, outperforming traditional databases in time-centric applications... read more  

Link
@faun shared a link, 10 months, 1 week ago
FAUN.dev()

Backup for GKE supports cross-project backup and restore

Backup for GKEjust got a power-up. Now, you can zip data from one Google Cloud project and unpack it in another. This shake-up makes disaster recovery smoother, teamwork easier, and security tighter by keeping backups out of the wrong hands. All the control, none of the headache. No scripts needed... read more  

Backup for GKE supports cross-project backup and restore
Link
@faun shared a link, 10 months, 1 week ago
FAUN.dev()

Docker Desktop 4.43: Expanded Model Runner, Reimagined MCP Catalog, MCP Server Submissions, and Smarter Gordon

Docker Desktop 4.43 cranks up AI integration with theModel Runner. OpenAI APIs? Now they're putty in your hands. Fine-tune model runtime with ease. EnterDocker’s Gordon—the multitasker extraordinaire who juggles threads like a caffeinated circus performer. Enjoy speeds and accuracy that make old ver.. read more  

Docker Desktop 4.43: Expanded Model Runner, Reimagined MCP Catalog, MCP Server Submissions, and Smarter Gordon
Link
@faun shared a link, 10 months, 1 week ago
FAUN.dev()

Automatic Helm Deployments with Ansible on Minikube: Jenkins & Grafana

Ansiblewields its off-the-shelf modules like a charm bracelet, linking arms withDockerandKubernetes. It turns the rut ofHelmsetup into a dance, orchestrating across machines like a seasoned conductor. Declare your Kubernetes resources with the flair of a playwright using Helm charts. Then, invite au.. read more  

Sigstore is an open source initiative designed to make software artifact signing and verification simple, automatic, and widely accessible. Its primary goal is to improve software supply chain security by enabling developers and organizations to cryptographically prove the origin and integrity of the software they build and distribute.

At its core, sigstore removes many of the traditional barriers associated with code signing. Instead of managing long-lived private keys manually, sigstore supports keyless signing, where identities are issued dynamically using OpenID Connect (OIDC) providers such as GitHub Actions, Google, or Microsoft. This dramatically lowers operational complexity and reduces the risk of key compromise.

The sigstore ecosystem is composed of several key components:

- Cosign: A tool for signing, verifying, and storing signatures for container images and other artifacts. Signatures are stored alongside artifacts in OCI registries, rather than embedded in them.

- Fulcio: A certificate authority that issues short-lived X.509 certificates based on OIDC identities, enabling keyless signing.

- Rekor: A transparency log that records signing events in an append-only, tamper-evident ledger. This provides public auditability and detection of suspicious or malicious signing activity.

Together, these components allow anyone to verify who built an artifact, when it was built, and whether it has been tampered with, using publicly verifiable cryptographic proofs. This aligns closely with modern supply chain security practices such as SLSA (Supply-chain Levels for Software Artifacts).

sigstore is widely adopted in the cloud-native ecosystem and integrates with tools like Kubernetes, container registries, CI/CD pipelines, and package managers. It is commonly used to sign container images, Helm charts, binaries, and SBOMs, and is increasingly becoming a baseline security requirement for production software delivery.

The project is governed by the OpenSSF (Open Source Security Foundation) and supported by major industry players.