Join us

ContentUpdates and recent posts about Sigstore..
Link
@faun shared a link, 11 months ago
FAUN.dev()

Why Environments Beat Clusters For Dev Experience

Developers chasepromotions, not the tedium of deployments. Environments should reign supreme—not just a lone Kubernetes cluster hogging the spotlight.Real-time insights? They zoom past those outdated, siloed CI pipelines... read more  

Link
@faun shared a link, 11 months ago
FAUN.dev()

Terraform AWS provider 6.0 now generally available

Terraform AWS Provider 6.0bursts onto the scene with multi-region support. Now, devs can tweak 32 config files in one shot, slimming down memory bloat. 🌍💻.. read more  

Terraform AWS provider 6.0 now generally available
Link
@faun shared a link, 11 months ago
FAUN.dev()

Amazon VPC raises default Route Table capacity

AWS VPClets your inner network architect cheer:500 routes per tablenow. That’s a cool 10x boost from before, turning network scaling from a headache into a child's play. 🚀.. read more  

Amazon VPC raises default Route Table capacity
Link
@faun shared a link, 11 months ago
FAUN.dev()

Automatic rollbacks are a last resort

Throw automatic rollbacks out the window. You don't need them.Continuous Deliverypartnered withhuman-driven resiliencesharpens up your software. When things go sideways, a speedy roll forward with a clever fix beats a blind retreat. Automatic rollbacks? They skip the surprises and rob you of learnin.. read more  

Automatic rollbacks are a last resort
Link
@faun shared a link, 11 months ago
FAUN.dev()

alden: detachable terminal sessions without breaking scrollback

Tired of losing terminal sessions and scrollback with tools liketmux,screen, ormosh? A new tool calledaldenkeeps your SSH shell alive after disconnects without breaking your native terminal scrollback. Unlike other solutions, it avoids emulating a terminal—so you get seamless reconnection and keep y.. read more  

Link
@faun shared a link, 11 months ago
FAUN.dev()

AWS Lambda announces native support for Avro and Protobuf formatted Kafka events

AWS Lambdanow natively supportsAvroandProtobufformatted Kafka events, dancing through schema chaos with Glue and Confluent registries. Toss custom deserialization in the trash; plug inPowertoolsand let open-source Kafka consumer interfaces do the grunt work... read more  

AWS Lambda announces native support for Avro and Protobuf formatted Kafka events
Link
@faun shared a link, 11 months ago
FAUN.dev()

Debugging memory leaks in Postgres, jemalloc edition

jemallocexcels at sniffing out memory leaks compared toAddressSanitizer, especially when leaks ghost out at program exit. But here's the catch: to dig into profiling with jemalloc, like you're wrangling Postgres, you better cozy up to Linux... read more  

Link
@faun shared a link, 11 months ago
FAUN.dev()

On Azure’s new SRE Agent

Microsoft's shinySRE Agentwades into network snafus with swagger but makes some bold, perplexing claims—like leaning on faulty data insights for fixes. Slick demos dazzle, yet its "approve and act" zeal might lure newbies into rash decisions. Handle with care!.. read more  

On Azure’s new SRE Agent
Link
@faun shared a link, 11 months ago
FAUN.dev()

Inside Google’s Agent2Agent (A2A) Protocol: Teaching AI Agents to Talk to Each Other

Agent2Agent (A2A)is the new gospel for AI agents, taking over as the universal translator across platforms. Imagine 50+ tech behemoths waving its banner. A2A, clutchingJSON-RPC 2.0 over HTTP(S), crafts a chat apocalypse for AI, wiping out the custom integration chaos, much like the venerableInternet.. read more  

Inside Google’s Agent2Agent (A2A) Protocol: Teaching AI Agents to Talk to Each Other
Link
@faun shared a link, 11 months ago
FAUN.dev()

Lenovo introduces new AI-optimized data center systems

Lenovo'sThinkSystem SR680a V4doesn't just perform—it explodes with AI power, thanks to Nvidia'sB200GPUs. We're talking4nmchips with a mind-boggling208 billion transistors. Boost? Try11x... read more  

Lenovo introduces new AI-optimized data center systems
Sigstore is an open source initiative designed to make software artifact signing and verification simple, automatic, and widely accessible. Its primary goal is to improve software supply chain security by enabling developers and organizations to cryptographically prove the origin and integrity of the software they build and distribute.

At its core, sigstore removes many of the traditional barriers associated with code signing. Instead of managing long-lived private keys manually, sigstore supports keyless signing, where identities are issued dynamically using OpenID Connect (OIDC) providers such as GitHub Actions, Google, or Microsoft. This dramatically lowers operational complexity and reduces the risk of key compromise.

The sigstore ecosystem is composed of several key components:

- Cosign: A tool for signing, verifying, and storing signatures for container images and other artifacts. Signatures are stored alongside artifacts in OCI registries, rather than embedded in them.

- Fulcio: A certificate authority that issues short-lived X.509 certificates based on OIDC identities, enabling keyless signing.

- Rekor: A transparency log that records signing events in an append-only, tamper-evident ledger. This provides public auditability and detection of suspicious or malicious signing activity.

Together, these components allow anyone to verify who built an artifact, when it was built, and whether it has been tampered with, using publicly verifiable cryptographic proofs. This aligns closely with modern supply chain security practices such as SLSA (Supply-chain Levels for Software Artifacts).

sigstore is widely adopted in the cloud-native ecosystem and integrates with tools like Kubernetes, container registries, CI/CD pipelines, and package managers. It is commonly used to sign container images, Helm charts, binaries, and SBOMs, and is increasingly becoming a baseline security requirement for production software delivery.

The project is governed by the OpenSSF (Open Source Security Foundation) and supported by major industry players.