Join us

ContentUpdates and recent posts about Sigstore..
Link
@faun shared a link, 10 months, 4 weeks ago
FAUN.dev()

GitHub Advisory Database by the numbers: Known security vulnerabilities and what you can do about them

GitHub Advisory Database curates22 000+reviewed and30 000+imported advisories from the NVD, repo advisories, and community sources. It fuels Dependabot, CVSS & EPSS ratings, and CNA services to ruthlessly prioritize and patch vulnerabilities at scale.. read more  

Link
@faun shared a link, 10 months, 4 weeks ago
FAUN.dev()

Kafka in 2025: A Clean Docker Compose Setup Without ZooKeeper

KafkakickedZookeeperto the curb as of version 4.0. And by 2023, Docker images were no longer invited to the party. Want to set it up locally?Bitnami'sversion steps in, offering custom settings to play with... read more  

Link
@faun shared a link, 10 months, 4 weeks ago
FAUN.dev()

Broadcom is Bullying Enterprises with VMware Audits

Broadcom's latest move? Burying those trusty perpetual licenses. Now it's subscription time, folks, with price tags attached like parachutes packed by someone mildly annoyed. And if that wasn't enough, they're on a mission to sniff out unlicensed users like a bloodhound on a hunt, wielding audits an.. read more  

Broadcom is Bullying Enterprises with VMware Audits
Link
@faun shared a link, 10 months, 4 weeks ago
FAUN.dev()

Sniffnet v1.4 introduces PCAP files import and it’s 2X faster than Wireshark!

Sniffnet v1.4zips through1.6 GBPCAP files in just 25 seconds on an 8-year-old MacBook Air. That's2.2x faster than Wireshark. How? It skips the encrypted payloads and goes straight for the packet headers, like a bloodhound on a scent... read more  

Sniffnet v1.4 introduces PCAP files import and it’s 2X faster than Wireshark!
Link
@faun shared a link, 10 months, 4 weeks ago
FAUN.dev()

Image Compatibility In Cloud Native Environments

Kubernetes Node Feature Discoverynow gives containers a say in the conversation. They can outline and validate OS and hardware needs. Smart scheduling for demanding apps just got a boost... read more  

Image Compatibility In Cloud Native Environments
Link
@faun shared a link, 10 months, 4 weeks ago
FAUN.dev()

Inspecting Service Traffic with mirrord dump

Withmirrord’s latest trick, monitoring incoming TCP traffic in Kubernetes feels like wielding abuilt-in tcpdump. But there’s a twist: it zeroes in on essential resources without eBPF or sidecars. Developers can filter and capture traffic in their sessions, offering a swift solution for debugging in .. read more  

Inspecting Service Traffic with mirrord dump
Link
@faun shared a link, 10 months, 4 weeks ago
FAUN.dev()

Kubernetes NodeRestriction Flaw Lets Nodes Bypass Resource Authorization

Kuberneteshas tripped over a major flaw (CVE-2025-4563). Rogue nodes can skip past auth checks, opening a door for privilege escalation. But don’t sweat it too much; this only bites if you've enabledDynamicResourceAllocationand run static pods.AKSusers, you're safe. But only if your setup isn't a me.. read more  

Link
@faun shared a link, 10 months, 4 weeks ago
FAUN.dev()

CNCF saves $1 million annually by migrating to OCI

Oracle's tossing$3M a yearin Ampere Arm-based credits into the mix for CNCF's cloud-native projects, supercharging them like they just downed a can of energy drink. Over at the Linux Foundation Education, they're watching their cloud bills shrink by $1M annually. Meanwhile, OCI Kubernetes Engine sho.. read more  

Link
@faun shared a link, 10 months, 4 weeks ago
FAUN.dev()

AWS Introduces Extended Threat Detection for EKS via GuardDuty

AWSGuardDutycranks up EKS security using slickeBPFagents. These agents snag threats like reverse shells and crypto mining directly at the container level. No fuss with user-deployed agents needed. GuardDuty shrugs off traditional security headaches, nudging cloud giants like AWS toward smarter, hass.. read more  

AWS Introduces Extended Threat Detection for EKS via GuardDuty
Link
@faun shared a link, 10 months, 4 weeks ago
FAUN.dev()

What's New in ArcGIS Enterprise 11.5 on Kubernetes

ArcGIS Enterprise 11.5onKubernetesjust lifted its game. It's rolling out support forStreetMap Premium, cranking up the speed with GPU nodes forNotebooks, and cozying up to the cloud viaVMware Tanzu. Expect faster GIS ops. There's also a shiny new file management UI for Notebooks, custom-built for yo.. read more  

What's New in ArcGIS Enterprise 11.5 on Kubernetes
Sigstore is an open source initiative designed to make software artifact signing and verification simple, automatic, and widely accessible. Its primary goal is to improve software supply chain security by enabling developers and organizations to cryptographically prove the origin and integrity of the software they build and distribute.

At its core, sigstore removes many of the traditional barriers associated with code signing. Instead of managing long-lived private keys manually, sigstore supports keyless signing, where identities are issued dynamically using OpenID Connect (OIDC) providers such as GitHub Actions, Google, or Microsoft. This dramatically lowers operational complexity and reduces the risk of key compromise.

The sigstore ecosystem is composed of several key components:

- Cosign: A tool for signing, verifying, and storing signatures for container images and other artifacts. Signatures are stored alongside artifacts in OCI registries, rather than embedded in them.

- Fulcio: A certificate authority that issues short-lived X.509 certificates based on OIDC identities, enabling keyless signing.

- Rekor: A transparency log that records signing events in an append-only, tamper-evident ledger. This provides public auditability and detection of suspicious or malicious signing activity.

Together, these components allow anyone to verify who built an artifact, when it was built, and whether it has been tampered with, using publicly verifiable cryptographic proofs. This aligns closely with modern supply chain security practices such as SLSA (Supply-chain Levels for Software Artifacts).

sigstore is widely adopted in the cloud-native ecosystem and integrates with tools like Kubernetes, container registries, CI/CD pipelines, and package managers. It is commonly used to sign container images, Helm charts, binaries, and SBOMs, and is increasingly becoming a baseline security requirement for production software delivery.

The project is governed by the OpenSSF (Open Source Security Foundation) and supported by major industry players.