Updates and recent posts about Sigstore..

Posts
Description

Story

@laura_garcia shared a post, 1 year ago

Software Developer, RELIANOID

🚨 Cyberattacks don’t take weekends off.

In Spain, 75% of ransomware attacks happen on weekends or public holidays. Why? Reduced staff and lower vigilance. 🔒 At RELIANOID, we protect your systems 24/7—because cybersecurity isn’t just a Monday-to-Friday job. 👉 Revisit this essential article: https://www.relianoid.com/blog/weekend-vulnerabil..

Story

@laura_garcia shared a post, 1 year ago

Software Developer, RELIANOID

RELIANOID soon at NAISS!

🔐 RELIANOID at NAISS 2025 – Austin, TX 📅 June 1–3, 2025 | 📍 Hilton Austin Hotel We’re excited to announce that RELIANOID will be attending the North American Information Security Summit (NAISS) — a premier gathering of cybersecurity leaders, innovators, and strategists. What’s on the agenda? ✅ Execu..

Story

@laura_garcia shared a post, 1 year ago

Software Developer, RELIANOID

Top rated review! Yeah!

🌟 Thank you for the 5-star review on Google! Your support keeps us going and growing. 🙌 #CustomerAppreciation #OpenSource #CyberSecurity #TechCommunity #RELIANOID #Innovation #Trust..

Review Saeed Google Social Networks RELIANOID

Link

@anjali shared a link, 1 year ago

Customer Marketing Manager, Last9

Common Issues with Grafana Login and How to Fix Them

Forgot your Grafana password or locked out? Know common login issues and simple fixes to get you back into your dashboards fast.

Link

@anjali shared a link, 1 year ago

Customer Marketing Manager, Last9

Track the Right Elasticsearch Metrics Without the Noise

Learn how to monitor the most important Elasticsearch metrics to keep your cluster healthy—without getting lost in unnecessary data noise.

Link

@anjali shared a link, 1 year ago

Customer Marketing Manager, Last9

OpenTelemetry vs Micrometer: Here’s How to Decide

Trying to pick between OpenTelemetry and Micrometer? Here’s a clear look at how they differ and where each one fits best.

Story

@laura_garcia shared a post, 1 year ago

Software Developer, RELIANOID

Dublin Tech Summit 2025

Exciting news! DTS25 – Dublin Tech Summit 2025 is coming to Dublin for two transformative days of innovation and collaboration as part of the Women in Tech Global Conference. Experience Europe’s best tech learning on 4 large stages, network in a vibrant Global Village, and enjoy exclusive attendee p..

Story

@laura_garcia shared a post, 1 year ago

Software Developer, RELIANOID

India’s Reserve Bank is strengthening cybersecurity

India’s Reserve Bank is strengthening cybersecurity with an exclusive domain for Indian banks and mandatory Additional Factor of Authentication (AFA) for cross-border transactions. As financial threats evolve, integrating Multi-Factor Authentication (MFA) is crucial for secure digital payments. At ..

India’s Central Bank Reinforces Cybersecurity

Link

@anjali shared a link, 1 year ago

Customer Marketing Manager, Last9

Getting Started with Loki for Log Management

A practical guide to setting up Loki for logs—how it works, how to query, and what to watch out for in real-world environments.

Story

@laura_garcia shared a post, 1 year ago

Software Developer, RELIANOID

🔍 What's the difference between an ALG, a Proxy, and a Firewall?

We’ve put together a clear comparison chart to help you understand how these three critical components operate at the application and network layers. 🛡️ Firewall: Blocks or allows traffic based on rules. 🌐 Proxy: Acts as an intermediary for requests. 🔁 ALG: Understands specific protocols to dynamica..

Comparison chart Proxy, Firewall, ALG RELIANOID

Sigstore is an open source initiative designed to make software artifact signing and verification simple, automatic, and widely accessible. Its primary goal is to improve software supply chain security by enabling developers and organizations to cryptographically prove the origin and integrity of the software they build and distribute.

At its core, sigstore removes many of the traditional barriers associated with code signing. Instead of managing long-lived private keys manually, sigstore supports keyless signing, where identities are issued dynamically using OpenID Connect (OIDC) providers such as GitHub Actions, Google, or Microsoft. This dramatically lowers operational complexity and reduces the risk of key compromise.

The sigstore ecosystem is composed of several key components:

- Cosign: A tool for signing, verifying, and storing signatures for container images and other artifacts. Signatures are stored alongside artifacts in OCI registries, rather than embedded in them.

- Fulcio: A certificate authority that issues short-lived X.509 certificates based on OIDC identities, enabling keyless signing.

- Rekor: A transparency log that records signing events in an append-only, tamper-evident ledger. This provides public auditability and detection of suspicious or malicious signing activity.

Together, these components allow anyone to verify who built an artifact, when it was built, and whether it has been tampered with, using publicly verifiable cryptographic proofs. This aligns closely with modern supply chain security practices such as SLSA (Supply-chain Levels for Software Artifacts).

sigstore is widely adopted in the cloud-native ecosystem and integrates with tools like Kubernetes, container registries, CI/CD pipelines, and package managers. It is commonly used to sign container images, Helm charts, binaries, and SBOMs, and is increasingly becoming a baseline security requirement for production software delivery.

The project is governed by the OpenSSF (Open Source Security Foundation) and supported by major industry players.