Updates and recent posts about Sigstore..

Posts
Description

Link

@faun shared a link, 11 months ago

FAUN.dev()

NSEnter and Kubernetes

nsenteris your backstage pass to aKubernetesnode. It plays with Linux namespaces, crashing through isolation walls for a direct look inside. Summon it withPID1 and proper permissions, and you're deep in the node's core. No middleman required... read more

Link

@faun shared a link, 11 months ago

FAUN.dev()

Changes to Kubernetes Slack

The Kubernetes gang will cling to their premium Slack status a while longer. But come 2025, free Slack will beckon. Discord’s got its eye on the scene too, whispering sweet promises of GitHub sync and other shiny toys... read more

Link

@faun shared a link, 11 months ago

FAUN.dev()

Interesting Kubernetes application demos

Kubeappsis your backstage pass to deploying and controllingK8sapps with style. Dive into a treasure chest ofHelmcharts ready to roll. For those looking to jazz up a demo, unleashKubedoomorKubevaders. Obliteratepodsfor stress-testing, or just because you can. Craving some retro-futuristic fun? Check .. read more

Link

@faun shared a link, 11 months ago

FAUN.dev()

F5 Unleashes Innovation with Powerful New AI Capabilities on BIG-IP Next for Kubernetes on NVIDIA BlueField-3 DPUs

TheModel Context Protocol (MCP)just crashed the party, turning heads and flipping tables with its focus on tailor-made AI setups. EnterAI factoriesandNeoclouds—souped-up cloud havens crafted to power-hungry AI demands. Handle with care, because these bad boys redefine what's possible... read more

Link

@faun shared a link, 11 months ago

FAUN.dev()

GKE Data Cache, now GA, accelerates stateful apps

GKE Data Cachesupercharges PostgreSQL on GKE. Imagine squeezing out480% more transactions per secondand slashing latency by80%. It's like a balancing disk on steroids—Qdrant search gets a10xboost, even without cramming everything into memory. Impressive, right?.. read more

Link

@anjali shared a link, 11 months ago

Customer Marketing Manager, Last9

11 Best Log Monitoring Tools for Developers in 2025

A technical comparison of 11 log monitoring tools developers use in 2025—features, trade-offs, pricing, and platform compatibility

Story

@laura_garcia shared a post, 11 months ago

Software Developer, RELIANOID

🚨 Industrial Cybersecurity: Are You Ready?

📘 We’ve published a Technical Guide to ISA/IEC 62443 Standards – your 5-minute roadmap to securing Industrial Automation and Control Systems (IACS). 🔐 ISA/IEC 62443 is the gold standard for industrial cybersecurity. From zones and conduits to secure development lifecycles, it addresses the full spec..

Knowledge base ISAIEC-62443 Industrial Cybersecurity Standards RELIANOID

Story

@laura_garcia shared a post, 11 months ago

Software Developer, RELIANOID

💸 The Cost of Cyber Insecurity

The average data breach in 2024 costs $4.45M — over $10M in finance and healthcare. Cyber incidents = market value loss, sales drop, and reputation damage. But there’s good news: 💡 Invest $500K in security → avoid $2M in losses = 300% ROI 🧠 Microsegmentation users saw 152% ROI, saved $2.9M, cut staf..

Link

@anjali shared a link, 11 months, 1 week ago

Customer Marketing Manager, Last9

Prometheus Logging Explained for Developers

Understand how Prometheus logging captures structured metrics, improves query performance, and scales observability in production systems.

Link

@anjali shared a link, 11 months, 1 week ago

Customer Marketing Manager, Last9

Docker Stop vs Kill: When to Use Each Command

docker stop gives containers time to shut down cleanly. docker kill doesn't—use it only when you need an immediate shutdown.

Sigstore is an open source initiative designed to make software artifact signing and verification simple, automatic, and widely accessible. Its primary goal is to improve software supply chain security by enabling developers and organizations to cryptographically prove the origin and integrity of the software they build and distribute.

At its core, sigstore removes many of the traditional barriers associated with code signing. Instead of managing long-lived private keys manually, sigstore supports keyless signing, where identities are issued dynamically using OpenID Connect (OIDC) providers such as GitHub Actions, Google, or Microsoft. This dramatically lowers operational complexity and reduces the risk of key compromise.

The sigstore ecosystem is composed of several key components:

- Cosign: A tool for signing, verifying, and storing signatures for container images and other artifacts. Signatures are stored alongside artifacts in OCI registries, rather than embedded in them.

- Fulcio: A certificate authority that issues short-lived X.509 certificates based on OIDC identities, enabling keyless signing.

- Rekor: A transparency log that records signing events in an append-only, tamper-evident ledger. This provides public auditability and detection of suspicious or malicious signing activity.

Together, these components allow anyone to verify who built an artifact, when it was built, and whether it has been tampered with, using publicly verifiable cryptographic proofs. This aligns closely with modern supply chain security practices such as SLSA (Supply-chain Levels for Software Artifacts).

sigstore is widely adopted in the cloud-native ecosystem and integrates with tools like Kubernetes, container registries, CI/CD pipelines, and package managers. It is commonly used to sign container images, Helm charts, binaries, and SBOMs, and is increasingly becoming a baseline security requirement for production software delivery.

The project is governed by the OpenSSF (Open Source Security Foundation) and supported by major industry players.