Cloud-Native Microservices With Kubernetes - 2nd Edition

A Comprehensive Guide to Building, Scaling, Deploying, Observing, and Managing Highly-Available Microservices in Kubernetes

> Get Your Copy

Updates and recent posts about Sigstore..

Posts
Description

That's all about @Sigstore — explore more posts below...

Activity

@pluto_native started using tool Terraform , 1 hour, 4 minutes ago.

Activity

@pluto_native started using tool Kubernetes , 1 hour, 4 minutes ago.

Activity

@pluto_native started using tool Google Cloud Platform , 1 hour, 4 minutes ago.

Activity

@pluto_native started using tool Amazon Web Services , 1 hour, 4 minutes ago.

Link

@eon01 shared a link, 5 hours ago

Founder, FAUN.dev

A curated list of free AI models, APIs, and tools you can use without paying a cent.

Running AI shouldn't require a credit card. This list curates genuinely free models — open-weight models you can self-host, free API tiers from major providers, and tools to run everything locally.

Activity

@eon01 added a new tool Unsloth , 10 hours, 29 minutes ago.

Course

@eon01 published a course, 11 hours ago

Founder, FAUN.dev

Local AI Engineering with Ollama

#LangCha... #Unsloth #Fine-tu... #Ollama #MCP

Run, understand, customize, fine-tune, and build agentic apps on your own hardware

Story

@laura_garcia shared a post, 14 hours ago

Software Developer, RELIANOID

EU Investment in Cybersecurity: Time for investing in Secure Solutions

🚨 €𝟭.𝟯 𝗕𝗜𝗟𝗟𝗜𝗢𝗡. That's how much the 𝗘𝗨 is investing in 𝗔𝗜, 𝗰𝘆𝗯𝗲𝗿𝘀𝗲𝗰𝘂𝗿𝗶𝘁𝘆, 𝗮𝗻𝗱 𝗱𝗶𝗴𝗶𝘁𝗮𝗹 𝘀𝗸𝗶𝗹𝗹𝘀. But here's the real question: 👉 𝙄𝙨 𝙮𝙤𝙪𝙧 𝙞𝙣𝙛𝙧𝙖𝙨𝙩𝙧𝙪𝙘𝙩𝙪𝙧𝙚 𝙧𝙚𝙖𝙙𝙮 𝙛𝙤𝙧 𝙬𝙝𝙖𝙩'𝙨 𝙘𝙤𝙢𝙞𝙣𝙜 𝙣𝙚𝙭𝙩? The European Commission has just sent a powerful message to organizations across Europe: cybersecurity is no longer optio..

Story

@nextgensoft shared a post, 1 day ago

Marketing Manager, nextgensoft

Why Businesses Are Moving from Generative AI to Agentic AI Systems?

Businesses are shifting from Generative AI to Agentic AI systems because modern enterprises need more than content generation; they need AI that can think, plan, make decisions, and execute tasks autonomously. Agentic AI enables smarter workflow automation, faster decision-making, reduced manual effort, and improved operational efficiency across industries. As businesses focus on scalability and intelligent automation, Agentic AI is emerging as the next evolution of enterprise AI solutions.

Link

@nextgensoft shared a link, 1 day ago

Marketing Manager, nextgensoft

Agentic AI Systems: Types, Architecture & Enterprise Use Cases

Want to build Agentic AI System? Explore this guide on Agentic AI systems, their types, architecture, and enterprise use cases.

Sigstore is an open source initiative designed to make software artifact signing and verification simple, automatic, and widely accessible. Its primary goal is to improve software supply chain security by enabling developers and organizations to cryptographically prove the origin and integrity of the software they build and distribute.

At its core, sigstore removes many of the traditional barriers associated with code signing. Instead of managing long-lived private keys manually, sigstore supports keyless signing, where identities are issued dynamically using OpenID Connect (OIDC) providers such as GitHub Actions, Google, or Microsoft. This dramatically lowers operational complexity and reduces the risk of key compromise.

The sigstore ecosystem is composed of several key components:

- Cosign: A tool for signing, verifying, and storing signatures for container images and other artifacts. Signatures are stored alongside artifacts in OCI registries, rather than embedded in them.

- Fulcio: A certificate authority that issues short-lived X.509 certificates based on OIDC identities, enabling keyless signing.

- Rekor: A transparency log that records signing events in an append-only, tamper-evident ledger. This provides public auditability and detection of suspicious or malicious signing activity.

Together, these components allow anyone to verify who built an artifact, when it was built, and whether it has been tampered with, using publicly verifiable cryptographic proofs. This aligns closely with modern supply chain security practices such as SLSA (Supply-chain Levels for Software Artifacts).

sigstore is widely adopted in the cloud-native ecosystem and integrates with tools like Kubernetes, container registries, CI/CD pipelines, and package managers. It is commonly used to sign container images, Helm charts, binaries, and SBOMs, and is increasingly becoming a baseline security requirement for production software delivery.

The project is governed by the OpenSSF (Open Source Security Foundation) and supported by major industry players.