Join us

ContentUpdates and recent posts about Sigstore..
Link
@faun shared a link, 1 year, 1 month ago
FAUN.dev()

Memory-safe sudo to become the default in Ubuntu

MeetUbuntu 25.10’s new sidekick:sudo-rs. This Rust-powered, memory-safe twist on sudo amps up security and simplifies upkeep. It embraces the mantra "less is more" by tossing unnecessary sudo features overboard. Canonical’s strategy—security without the bloat—aims for the long game... read more  

Memory-safe sudo to become the default in Ubuntu
Link
@faun shared a link, 1 year, 1 month ago
FAUN.dev()

Redis is now available under the AGPLv3 open source license

Redis 8: Now Dual-Licensed Under AGPL—And Commands Just Got 87% Faster. This move seeks to harmonize core and stack features, echoing Salvatore’s triumphant return... read more  

Redis is now available under the AGPLv3 open source license
Link
@faun shared a link, 1 year, 1 month ago
FAUN.dev()

JFrog’s Journey with AWS Graviton

JFrog’s leap toAWS Gravitonunleashed some wizardry: slashing compute costs by20%, slicing CPU usage by another20%, and shaving network latency by10%. But here’s the kicker—carbon footprint plummeted by60%. That’s efficiency with an eco-twist. They juggled feature flags and multi-architecture support.. read more  

JFrog’s Journey with AWS Graviton
Link
@faun shared a link, 1 year, 1 month ago
FAUN.dev()

Ran out of infrastructure titles

Taloskicked k3s to the curb, quenching that nagging itch for declarative order that Nix left behind. For traffic control,Contourswooped in, bringing sanity to my DNS maze and giving Nginx the boot.VictoriaMetricsoutpaced Prometheus, delivering speed and thrift. It even does remote monitoring like a .. read more  

Link
@faun shared a link, 1 year, 1 month ago
FAUN.dev()

Taking a Look at Database Disk, Memory, and Concurrency Management

Databasesdance between block and file-level access. They cleverly use memory like a magician with a hidden pocket, smoothing over sluggish disk interactions. Logs? They’re the secret sauce for slick crash recovery.Concurrency controlin the mad circus of transactions? Locks. They're the backstage cre.. read more  

Link
@faun shared a link, 1 year, 1 month ago
FAUN.dev()

VMware perpetual license holders receive cease-and-desist letters from Broadcom

Broadcomis upending the game. After itsVMwareacquisition, they slashed perpetual licenses and cranked up subscription costs by a staggering300%. To top it off, they're firing off cease-and-desist letters to folks who’ve sworn off VMware. It’s like breaking up but still getting texts from your ex—awk.. read more  

VMware perpetual license holders receive cease-and-desist letters from Broadcom
Link
@faun shared a link, 1 year, 1 month ago
FAUN.dev()

AI-Driven DevOps: Quality and Compliance with Inflectra and Amazon Bedrock

Inflectra's AI-driven DevOps tools, likeSpira, hack away at development time by 50% and ramp up test coverage by 40%. This reshapes cloud workflows like magic.Spira'sagile ALM solutions let industries migrate with ease, ensuring compliance stays tight as a drum while AI injects productivity with jet.. read more  

AI-Driven DevOps: Quality and Compliance with Inflectra and Amazon Bedrock
Link
@faun shared a link, 1 year, 1 month ago
FAUN.dev()

Speeding up Terraform caching with OverlayFS

Terraform's plugin cache chokes when confronted withconcurrent runs. Picture a traffic jam at rush hour—it ain't pretty. EnterOverlayFS, the urban planner for your code. It tricks each simultaneous Terraform init into believing it's hogging the same plugin cache. Then, with finesse, it syncs everyth.. read more  

Link
@faun shared a link, 1 year, 1 month ago
FAUN.dev()

37signals on-prem migration to save millions, abandon AWS

37signalsplans to chop its cloud bill from a hefty$3.2Mto under$1Ma year by dumping AWS for its own gear, with some help from swift Dell and Pure Storage systems. Oh, andAWStossed in a $250K fee waiver to nudge that transition along... read more  

37signals on-prem migration to save millions, abandon AWS
Link
@faun shared a link, 1 year, 1 month ago
FAUN.dev()

Ansible: pure (only in its) pragmatism

Ansibleslashes through the tangled mess of system admin tasks on Windows and Linux without needing agents, keeping things tidy and consistent. Just don't count on it to break any speed records. ItsYAML-based DSLand an extensive library of plugins give it some flair, but when it comes to full-scale i.. read more  

Sigstore is an open source initiative designed to make software artifact signing and verification simple, automatic, and widely accessible. Its primary goal is to improve software supply chain security by enabling developers and organizations to cryptographically prove the origin and integrity of the software they build and distribute.

At its core, sigstore removes many of the traditional barriers associated with code signing. Instead of managing long-lived private keys manually, sigstore supports keyless signing, where identities are issued dynamically using OpenID Connect (OIDC) providers such as GitHub Actions, Google, or Microsoft. This dramatically lowers operational complexity and reduces the risk of key compromise.

The sigstore ecosystem is composed of several key components:

- Cosign: A tool for signing, verifying, and storing signatures for container images and other artifacts. Signatures are stored alongside artifacts in OCI registries, rather than embedded in them.

- Fulcio: A certificate authority that issues short-lived X.509 certificates based on OIDC identities, enabling keyless signing.

- Rekor: A transparency log that records signing events in an append-only, tamper-evident ledger. This provides public auditability and detection of suspicious or malicious signing activity.

Together, these components allow anyone to verify who built an artifact, when it was built, and whether it has been tampered with, using publicly verifiable cryptographic proofs. This aligns closely with modern supply chain security practices such as SLSA (Supply-chain Levels for Software Artifacts).

sigstore is widely adopted in the cloud-native ecosystem and integrates with tools like Kubernetes, container registries, CI/CD pipelines, and package managers. It is commonly used to sign container images, Helm charts, binaries, and SBOMs, and is increasingly becoming a baseline security requirement for production software delivery.

The project is governed by the OpenSSF (Open Source Security Foundation) and supported by major industry players.