Join us

ContentUpdates and recent posts about Sigstore..
Link
@faun shared a link, 10 months, 4 weeks ago
FAUN.dev()

How MacOS Tahoe's killer new feature could make Docker feel obsolete

macOS Tahoerolls out nativeLinux containersupport. Goodbye, third-party hoop-jumping with Docker. Hello, secure coding paradise. Developers rejoice!.. read more  

How MacOS Tahoe's killer new feature could make Docker feel obsolete
Link
@faun shared a link, 10 months, 4 weeks ago
FAUN.dev()

ArgoCD: A Practical Guide to GitOps on Kubernetes

ArgoCD tackles giant deployments head-on, operating with a cunning pull-based model inside Kubernetes clusters. This clever move slashes the risk from exposed API keys and tightens security.LoveHolidays? They're jazzed. Their deploys skyrocket—over 1500 times a month. It’s a testament to ArgoCD's kn.. read more  

ArgoCD: A Practical Guide to GitOps on Kubernetes
Story
@laura_garcia shared a post, 11 months ago
Software Developer, RELIANOID

🔁 What is a Load Balancing Switch?

A Load Balancing Switch is a powerful networking device that distributes incoming traffic across multiple servers — improving performance, scalability, and availability. At RELIANOID, we’ve integrated this into our solutions to help businesses: ✅ Optimize resource usage ✅ Ensure high availability ✅ ..

Link
@shyamvijay shared a link, 11 months ago
@Mirrorfly

Embed Video Conferencing in Your App with MirrorFly’s API

Learn how to integrate scalable, secure, and real-time video conferencing into your app using MirrorFly's Video Calling API. This blog walks you through the benefits, technical features, and step-by-step process to embed video calls effortlessly into web or mobile platforms.

In-app video conferencing interface powered by MirrorFly API with real-time low-latency video call features on mobile and web
Story
@dridhone shared a post, 11 months ago
Founder, www.dridhon.com

PCB Overview

Printed Circuit Board A Printed Circuit Board (PCB) is a crucial component in electronic devices, providing both mechanical and electrical support to various electronic components. Here's an overview of PCBs covering their structure, types, manufacturing process, and applications: Structure of a PCB..

Business Process Automation Using UiPath (1)
Link
@webkulsoftware shared a link, 11 months ago
Webkul Software

Which Businesses should use Headless?

Headless eCommerce is ideal for businesses seeking scalability, flexibility, and omnichannel presence. Enterprises with multiple brands, global operations, or complex UI requirements benefit most. It’s also suitable for companies looking to improve user experience, speed, or integrate with mobile apps and IoT devices. Small businesses may consider it based on budget and goals. Headless eCommerce can involve higher initial costs due to separate frontend development and API setup.

Story
@laura_garcia shared a post, 11 months ago
Software Developer, RELIANOID

🔐 Strengthen Your Security with SIEM 🔐

Cyber threats are evolving, and organizations need real-time visibility to detect and respond to incidents effectively. Security Information and Event Management (SIEM) is a crucial solution that collects, analyzes, and correlates security data to identify threats before they escalate. At RELIANOID,..

Story
@shurup shared a post, 11 months ago
@palark

Looking for a Kaniko alternative to build containers? Give werf a try

werf

Since Kaniko is no longer maintained, you might be looking for another tool to build your containers in a Kubernetes-based environment. werf is a CNCF Sandbox project that might be helpful in your case.

werf in CI/CD pipelines
Story
@alberthiltonn shared a post, 11 months ago

A Quick Guide on How to Build an AI MVP Application

@sulu/web

Build an AI MVP by defining the problem, researching the market, assembling a team, choosing the right technology, preparing data, prototyping, testing, and refining based on feedback.

Build an AI MVP Application
Story
@makhtar shared a post, 11 months ago
Marketing Consultant, Read Dive

Magento Web Design: The Ultimate Guide for Ecommerce Success

Magento is one of the most powerful e-commerce platforms in the world. It offers flexibility, control, and tools for building great online stores. But success with Magento starts with smart and simple web design.

Magento Web Design
Sigstore is an open source initiative designed to make software artifact signing and verification simple, automatic, and widely accessible. Its primary goal is to improve software supply chain security by enabling developers and organizations to cryptographically prove the origin and integrity of the software they build and distribute.

At its core, sigstore removes many of the traditional barriers associated with code signing. Instead of managing long-lived private keys manually, sigstore supports keyless signing, where identities are issued dynamically using OpenID Connect (OIDC) providers such as GitHub Actions, Google, or Microsoft. This dramatically lowers operational complexity and reduces the risk of key compromise.

The sigstore ecosystem is composed of several key components:

- Cosign: A tool for signing, verifying, and storing signatures for container images and other artifacts. Signatures are stored alongside artifacts in OCI registries, rather than embedded in them.

- Fulcio: A certificate authority that issues short-lived X.509 certificates based on OIDC identities, enabling keyless signing.

- Rekor: A transparency log that records signing events in an append-only, tamper-evident ledger. This provides public auditability and detection of suspicious or malicious signing activity.

Together, these components allow anyone to verify who built an artifact, when it was built, and whether it has been tampered with, using publicly verifiable cryptographic proofs. This aligns closely with modern supply chain security practices such as SLSA (Supply-chain Levels for Software Artifacts).

sigstore is widely adopted in the cloud-native ecosystem and integrates with tools like Kubernetes, container registries, CI/CD pipelines, and package managers. It is commonly used to sign container images, Helm charts, binaries, and SBOMs, and is increasingly becoming a baseline security requirement for production software delivery.

The project is governed by the OpenSSF (Open Source Security Foundation) and supported by major industry players.