Join us

ContentUpdates and recent posts about Sigstore..
 Activity
@kala added a new tool Ollama , 1 day, 10 hours ago.
Story Keploy Team
@sancharini shared a post, 3 days, 7 hours ago

Building Automated Regression Testing From Scratch: A Complete Walkthrough

Learn how to build automated regression testing from scratch in 4-6 weeks. Step-by-step walkthrough covering phases, implementation, tools, and avoiding mistakes.

regression testing services
Story
@elsie-rainee shared a post, 3 days, 7 hours ago
Full Stack Engineer, WPWeb Infotech

Android Architecture: Components, Patterns & Best Practices Guide

Learn Android architecture with components, patterns, and best practices to build mobile apps that are scalable, easy to maintain, and high-performing.

Android Architecture
Story
@viktoriiagolovtseva shared a post, 4 days, 5 hours ago

Online event planning template

Planning a webinar, workshop, or team-wide event in Jira? You’re not alone. When you’re managing internal demos, customer-facing webinars, or company-wide town halls, event coordination takes effort and often involves stakeholders across departments.

Missed deadlines, unclear responsibilities, or last-minute changes can turn even a small event into a major time sink. But there’s good news: you can streamline your event workflows using the tools your team already uses.

Instead of juggling spreadsheets, emails, and calendar invites, create a customizable event planning template in Jira. It brings everything into one place, supports collaboration, and helps you keep track of dependencies, deliverables, and last-minute requests in real time.

Zrzut ekranu 2026-05-01 150322
Story
@viktoriiagolovtseva shared a post, 4 days, 5 hours ago

Performance Review Template That Actually Works

Hiring the right person is only half the equation — helping them grow is the other

Zrzut ekranu 2026-05-01 131816
Story Keploy Team
@sancharini shared a post, 4 days, 6 hours ago

How to Track DORA Metrics Without Months of Engineering Work

Start tracking DORA metrics this week without months of work. Learn simple manual tracking, gradual automation, and practical tools to measure deployment performance

Track DORA Metrics Without Months of Engineering Work
Story
@viktoriiagolovtseva shared a post, 4 days, 9 hours ago

Contract Review Template for the Legal Team: a Free Checklist

Whether you’re reviewing a routine non-disclosure agreement or a complex commercial contract, your team likely follows roughly the same steps. Although many legal professionals don’t require a predefined plan, in some cases, having a contract review template is very helpful. 

For example, if you have a large legal department, work in a legal firm with numerous clients, or need to scale best practices, in all these cases, process standardization is essential. A contract review template enables you to document all the crucial steps, ensuring that your processes are robust and repeatable.

In this guide, we’ll share a free contract review template for legal teams. We also explain how to use it in Jira or Monday and how to add it to your tasks automatically.

Zrzut ekranu 2026-05-01 103840
Story
@viktoriiagolovtseva shared a post, 4 days, 11 hours ago

Jira Automation Best Practices That Will Save You Time

Managing projects in Jira often involves many repetitive actions. Creating work items for recurring tasks, reassigning them for reviews, and syncing statuses with dev tools – these are just a few examples. With Jira automation, you can handle such routine actions more efficiently and reduce manual work. If you set up automation rules that work together as a whole, you will create a well-functioning system. This will help you streamline processes and optimize resources.

In this article, we explore hands-on Jira automation best practices that actually save time. You’ll learn how to set up effective rules, avoid common mistakes, and make automation work seamlessly for your team’s unique processes.

Zrzut ekranu 2026-05-01 090408
 Activity
@adrian_schmidt started using tool TypeScript , 5 days, 6 hours ago.
 Activity
@adrian_schmidt started using tool React , 5 days, 6 hours ago.
Sigstore is an open source initiative designed to make software artifact signing and verification simple, automatic, and widely accessible. Its primary goal is to improve software supply chain security by enabling developers and organizations to cryptographically prove the origin and integrity of the software they build and distribute.

At its core, sigstore removes many of the traditional barriers associated with code signing. Instead of managing long-lived private keys manually, sigstore supports keyless signing, where identities are issued dynamically using OpenID Connect (OIDC) providers such as GitHub Actions, Google, or Microsoft. This dramatically lowers operational complexity and reduces the risk of key compromise.

The sigstore ecosystem is composed of several key components:

- Cosign: A tool for signing, verifying, and storing signatures for container images and other artifacts. Signatures are stored alongside artifacts in OCI registries, rather than embedded in them.

- Fulcio: A certificate authority that issues short-lived X.509 certificates based on OIDC identities, enabling keyless signing.

- Rekor: A transparency log that records signing events in an append-only, tamper-evident ledger. This provides public auditability and detection of suspicious or malicious signing activity.

Together, these components allow anyone to verify who built an artifact, when it was built, and whether it has been tampered with, using publicly verifiable cryptographic proofs. This aligns closely with modern supply chain security practices such as SLSA (Supply-chain Levels for Software Artifacts).

sigstore is widely adopted in the cloud-native ecosystem and integrates with tools like Kubernetes, container registries, CI/CD pipelines, and package managers. It is commonly used to sign container images, Helm charts, binaries, and SBOMs, and is increasingly becoming a baseline security requirement for production software delivery.

The project is governed by the OpenSSF (Open Source Security Foundation) and supported by major industry players.