Updates and recent posts about Sigstore..

Posts
Description

Link

@faun shared a link, 1 year, 2 months ago

FAUN.dev()

Fresh Swap Features for Linux Users in Kubernetes 1.32

Kubernetes 1.22 saw the debut of Alpha swap support, allowing Linux nodes to gracefully handle memory surges by relocating dormant data. By version 1.28, swap support advanced to Beta, bolstering stability, along with cgroup v2 integration, and smartly determining swap limits on its own. Pods in hig.. read more

Link

@faun shared a link, 1 year, 2 months ago

FAUN.dev()

Every pod eviction in Kubernetes, explained

Kubernetes governs pod lifecycles with various eviction techniques that can influence availability and sometimes disregard PodDisruptionBudgets. To address nodes under duress, Kubelet takes action. At the same time, eviction APIs, taints, and kube-schedulers oust pods according to priority. Configur.. read more

Link

@faun shared a link, 1 year, 2 months ago

FAUN.dev()

Ingress-nginx CVE-2025-1974: What You Need to Know

Ingress-nginx patches critical vulnerabilities in CVE-2025-1974, compelling users to upgrade for secure cluster management. Versionsv1.12.1 and v1.11.5eliminate these flaws. If an immediate upgrade isn't feasible, users should consider disabling the Validating Admission Controller... read more

Link

@anjali shared a link, 1 year, 2 months ago

Customer Marketing Manager, Last9

Python Loguru: The Logging Cheat Code You Need in Your Life

If logging in Python feels like a chore, Loguru is the cheat code you need—zero boilerplate, rich features, and pure simplicity!

Link

@anjali shared a link, 1 year, 2 months ago

Customer Marketing Manager, Last9

New Relic vs Datadog: The Complete Comparison

New Relic or Datadog? Compare features, pricing, and performance to find the right observability tool for your needs.

Story

@laura_garcia shared a post, 1 year, 2 months ago

Software Developer, RELIANOID

Live Technical Support

Are you ready to see real support in action? Check out our latest video featuring one of our expert support technicians working live with a client to migrate from v6.2 to v8. In this session, we not only recreated the cluster but also ensured that every service is operating flawlessly. It’s a clear ..

Link

@anjali shared a link, 1 year, 2 months ago

Customer Marketing Manager, Last9

MySQL Logs: Your Guide for Database Performance

Struggling with slow queries? MySQL logs hold the answers! Learn how to read them, fix issues, and boost your database performance.

Story

@laura_garcia shared a post, 1 year, 2 months ago

Software Developer, RELIANOID

Application Layer Gateway Properties

When dealing with modern network security and performance challenges, Application Layer Gateways (ALGs) play a crucial role in ensuring seamless communication, security, and optimization at the application layer. But what makes an ALG so important? ✅ Protocol Awareness: ALGs understand and modify sp..

Link

@anjali shared a link, 1 year, 2 months ago

Customer Marketing Manager, Last9

Ubuntu Crash Logs: Find, Fix, and Prevent System Failures

Learn how to find and use Ubuntu crash logs to troubleshoot issues, prevent future failures, and keep your system running smoothly.

Link

@anjali shared a link, 1 year, 2 months ago

Customer Marketing Manager, Last9

RabbitMQ Logs: Monitoring, Troubleshooting & Configuration

If RabbitMQ queues are backing up or messages aren’t being consumed, logs can help you figure out what’s wrong. Here’s how to monitor and fix issues.

Sigstore is an open source initiative designed to make software artifact signing and verification simple, automatic, and widely accessible. Its primary goal is to improve software supply chain security by enabling developers and organizations to cryptographically prove the origin and integrity of the software they build and distribute.

At its core, sigstore removes many of the traditional barriers associated with code signing. Instead of managing long-lived private keys manually, sigstore supports keyless signing, where identities are issued dynamically using OpenID Connect (OIDC) providers such as GitHub Actions, Google, or Microsoft. This dramatically lowers operational complexity and reduces the risk of key compromise.

The sigstore ecosystem is composed of several key components:

- Cosign: A tool for signing, verifying, and storing signatures for container images and other artifacts. Signatures are stored alongside artifacts in OCI registries, rather than embedded in them.

- Fulcio: A certificate authority that issues short-lived X.509 certificates based on OIDC identities, enabling keyless signing.

- Rekor: A transparency log that records signing events in an append-only, tamper-evident ledger. This provides public auditability and detection of suspicious or malicious signing activity.

Together, these components allow anyone to verify who built an artifact, when it was built, and whether it has been tampered with, using publicly verifiable cryptographic proofs. This aligns closely with modern supply chain security practices such as SLSA (Supply-chain Levels for Software Artifacts).

sigstore is widely adopted in the cloud-native ecosystem and integrates with tools like Kubernetes, container registries, CI/CD pipelines, and package managers. It is commonly used to sign container images, Helm charts, binaries, and SBOMs, and is increasingly becoming a baseline security requirement for production software delivery.

The project is governed by the OpenSSF (Open Source Security Foundation) and supported by major industry players.