Join us

ContentUpdates and recent posts about Sigstore..
Link
@faun shared a link, 11 months, 2 weeks ago
FAUN.dev()

Tracing Syscalls with eBPF in Docker: A Practical Example

This post walks through an example of combining a FastAPI service with an eBPF tracer to monitor syscalls. It covers common pitfalls encountered during development on macOS, the shift to containerizing the environment, and how the author ultimately succeeded in capturing the desired syscalls—a hands.. read more  

Link
@faun shared a link, 11 months, 2 weeks ago
FAUN.dev()

How to Use AI to Detect PPE Compliance in Edge Environments

Meet the motley crew that is theYOLOv8-based AI team. These guys get serious about detecting hard hats across countless video streams and they do it in real time. Their secret weapon? The metallic trio ofZEDEDA,Rancher, andTerraform.ZEDEDAtames edge management.Rancherwrangles Kubernetes.Terraform? I.. read more  

Link
@faun shared a link, 11 months, 2 weeks ago
FAUN.dev()

We saved 30% on Kubernetes by switching to 70% more expensive VMs

Omio swapped Spot VMs for standard ones in a single region and unearthed a shocker. Costs didn't skyrocket; they actually dropped. Network glitches? Gone. They braced for a70% budget implosionbut emerged with a grin. Standardizing on 16-core, 1:4 RAM machines cranked up performance and dialed down c.. read more  

We saved 30% on Kubernetes by switching to 70% more expensive VMs
Link
@faun shared a link, 11 months, 2 weeks ago
FAUN.dev()

How We Migrated 30+ Kubernetes Clusters to Terraform

Terraformisn't just making waves atSCHIP; it's rewriting the rulebook. Watching CI plan times dive from a sluggish 10 minutes to a snappy 30 seconds feels like magic, thanks to its knack for spitting out import statements like they're hotcakes. While flashy automation dazzles, it's actually the grit.. read more  

How We Migrated 30+ Kubernetes Clusters to Terraform
Link
@adyrcz shared a link, 11 months, 2 weeks ago
Head of Security & Compliance, Linkfire

Agentic AI Manifest – A Schema to Describe What Agents Do

Just launched agent-manifest.org — a schema for describing what AI agents do, what they need, and how they work.

Agents are the new APIs

Agents are becoming the next layer of software abstraction—autonomous tools that act on our behalf, perform tasks, make decisions, and interact with APIs, data, and humans.

But as agents proliferate, we face a growing challenge:

How do we understand what an agent does, what it needs, and what it can be trusted with?

See the proposed standard to solve this problem

Robot Librarian
Link
@anjali shared a link, 11 months, 2 weeks ago
Customer Marketing Manager, Last9

How to Integrate OpenTelemetry Collector with Prometheus

Understand how to set up OpenTelemetry Collector with Prometheus for easy, vendor-neutral metrics collection and storage.

otel
Story
@laura_garcia shared a post, 11 months, 2 weeks ago
Software Developer, RELIANOID

🚀 RELIANOID at VivaTech 2025 – Paris

📅 June 11–14, 2025 | 🇫🇷 Paris, France 📍 Europe’s Biggest Startup & Tech Event From June 11–14, Paris becomes the center of global innovation at Viva Technology 2025 — bringing together 165,000+ attendees, 13,500 startups, 3,500 exhibitors, and 400 speakers to explore what’s next in tech. Here’s why ..

VIVA technology paris 2025
Story
@laura_garcia shared a post, 11 months, 3 weeks ago
Software Developer, RELIANOID

🌍 London Tech Week 2025

📅 June 10–14 | Olympia London 🎯 Theme: Tech in the Age of AI RELIANOID is proud to join Europe’s top tech festival — connecting global innovators, investors, and leaders. 🔐 Discover how our secure, AI-driven application delivery solutions power the digital future. Let’s connect in London! #LTW2025#A..

London Tech Week 2025
Story
@laura_garcia shared a post, 11 months, 3 weeks ago
Software Developer, RELIANOID

🛑 End-of-life = No patches. No protection. High risk.

🚨 FBI Alert: New Variant of TheMoon Malware Targets End-of-Life Routers Is your infrastructure protected? The FBI has issued a PSA warning about TheMoon malware targeting outdated routers to install proxies and hide criminal activity. At RELIANOID, we’ve always emphasized the importance of timely up..

Blog Malware Targeting End-of-Life Routers
Link
@mashka shared a link, 11 months, 3 weeks ago
Paid Acquisition and Growth Marketing, xygeni

AI-Powered DevSecOps. Orchestrating Security at Cloud Scale

SafeDev Talk: AI-Powered DevSecOps – Orchestrating Security at Cloud Scale

Join us for an insightful discussion on how AI is revolutionizing DevSecOps, enhancing security across the Software Development Life Cycle (SDLC).

Don't miss this opportunity to understand how AI is reshaping the future of DevSecOps https://www.linkedin.com/events/7335954209948819457SafeDev Talk on AI-Powered DevSecOps

SafeDev Talk - AI-Powered DevSecOps
Sigstore is an open source initiative designed to make software artifact signing and verification simple, automatic, and widely accessible. Its primary goal is to improve software supply chain security by enabling developers and organizations to cryptographically prove the origin and integrity of the software they build and distribute.

At its core, sigstore removes many of the traditional barriers associated with code signing. Instead of managing long-lived private keys manually, sigstore supports keyless signing, where identities are issued dynamically using OpenID Connect (OIDC) providers such as GitHub Actions, Google, or Microsoft. This dramatically lowers operational complexity and reduces the risk of key compromise.

The sigstore ecosystem is composed of several key components:

- Cosign: A tool for signing, verifying, and storing signatures for container images and other artifacts. Signatures are stored alongside artifacts in OCI registries, rather than embedded in them.

- Fulcio: A certificate authority that issues short-lived X.509 certificates based on OIDC identities, enabling keyless signing.

- Rekor: A transparency log that records signing events in an append-only, tamper-evident ledger. This provides public auditability and detection of suspicious or malicious signing activity.

Together, these components allow anyone to verify who built an artifact, when it was built, and whether it has been tampered with, using publicly verifiable cryptographic proofs. This aligns closely with modern supply chain security practices such as SLSA (Supply-chain Levels for Software Artifacts).

sigstore is widely adopted in the cloud-native ecosystem and integrates with tools like Kubernetes, container registries, CI/CD pipelines, and package managers. It is commonly used to sign container images, Helm charts, binaries, and SBOMs, and is increasingly becoming a baseline security requirement for production software delivery.

The project is governed by the OpenSSF (Open Source Security Foundation) and supported by major industry players.