Cloud Native CI/CD with GitLab
From Commit to Production Ready
Updates and recent posts about Sigstore.. Course
@eon01 published a course, 4ย months, 4ย weeks ago
Founder, FAUN.dev
Course 
@eon01 published a course, 4ย months, 4ย weeks ago
Founder, FAUN.dev
Observability with Prometheus and Grafana
A Complete Hands-On Guide to Operational Clarity in Cloud-Native Systems
Course 
@eon01 published a course, 4ย months, 4ย weeks ago
Founder, FAUN.dev
Cloud-Native Microservices With Kubernetes - 2nd Edition
A Comprehensive Guide to Building, Scaling, Deploying, Observing, and Managing Highly-Available Microservices in Kubernetes
Course
@eon01 published a course, 4ย months, 4ย weeks ago
Founder, FAUN.dev
Link
@anjali shared a link, 4ย months, 4ย weeks ago
Customer Marketing Manager, Last9
Instrument Jenkins With OpenTelemetry
Instrument Jenkins with OpenTelemetry to understand pipeline behavior, stage latency, and deploy steps using a single telemetry flow.
ย Activity
@devopslinks added a new tool Fleet , 5ย months ago.
Course
@eon01 published a course, 5ย months ago
Founder, FAUN.dev
End-to-End Kubernetes with Rancher, RKE2, K3s, Fleet, Longhorn, and NeuVector
The full journey from nothing to production
Story
@laura_garcia shared a post, 5ย months ago
Software Developer, RELIANOID
๐ฅ ๐๐น๐ฎ๐ฐ๐ธ ๐๐ฟ๐ถ๐ฑ๐ฎ๐ ๐ฎ๐ ๐ฅ๐๐๐๐๐ก๐ข๐๐: ๐๐ ๐ฐ๐น๐๐๐ถ๐๐ฒ ๐ฃ๐ฟ๐ผ๐บ๐ผ๐๐ถ๐ผ๐ป๐ ๐๐ฟ๐ฒ ๐๐ถ๐๐ฒ! ๐ฅ
This year, weโre taking Black Friday to the next level โ with ๐๐ฎ๐ถ๐น๐ผ๐ฟ๐ฒ๐ฑ ๐ฝ๐ฟ๐ผ๐บ๐ผ๐๐ถ๐ผ๐ป๐ designed specifically for our users, partners, and customers, who will receive their ๐ฒ๐ ๐ฐ๐น๐๐๐ถ๐๐ฒ ๐ผ๐ณ๐ณ๐ฒ๐ฟ ๐ฑ๐ถ๐ฟ๐ฒ๐ฐ๐๐น๐ tomorrow, perfectly matched to their environment โก๏ธ ๐ ๐๐๐๐๐ผ๐บ๐ถ๐๐ฒ๐ฑ ๐ข๐ณ๐ณ๐ฒ๐ฟ๐ ๐ณ๐ผ๐ฟ ๐๐๐ฒ๐ฟ๐ ๐ก๐ฒ๐ฒ๐ฑ. ๐ ๐๐ผ ๐๐ผ๐ ๐๐ฎ๐ป๐ ๐๐ผ ๐ธ๐ป๐ผ..
Story Trending
@thiagoterzi shared a post, 5ย months ago
CEO, dgt27
Overcoming Data Duplication in CRM Systems
Learn how to prevent and resolve CRM data duplication using automation, AI tools, and smart integrations like Marketo Salesforce integration to maintain cleaner data.
Story
@laura_garcia shared a post, 5ย months ago
Software Developer, RELIANOID
๐ New Deployment Guide: RELIANOID Enterprise Edition v8 on Azure with Terraform
We're excited to share a 1-minute deployment guide showing how to quickly launch the RELIANOID Load Balancer Enterprise Edition v8 on Microsoft Azure using our official Terraform module. ๐ง Whatโs inside the guide? Prerequisites (Terraform, Azure CLI, SSH keys) How to find the official Terraform modu..
At its core, sigstore removes many of the traditional barriers associated with code signing. Instead of managing long-lived private keys manually, sigstore supports keyless signing, where identities are issued dynamically using OpenID Connect (OIDC) providers such as GitHub Actions, Google, or Microsoft. This dramatically lowers operational complexity and reduces the risk of key compromise.
The sigstore ecosystem is composed of several key components:
- Cosign: A tool for signing, verifying, and storing signatures for container images and other artifacts. Signatures are stored alongside artifacts in OCI registries, rather than embedded in them.
- Fulcio: A certificate authority that issues short-lived X.509 certificates based on OIDC identities, enabling keyless signing.
- Rekor: A transparency log that records signing events in an append-only, tamper-evident ledger. This provides public auditability and detection of suspicious or malicious signing activity.
Together, these components allow anyone to verify who built an artifact, when it was built, and whether it has been tampered with, using publicly verifiable cryptographic proofs. This aligns closely with modern supply chain security practices such as SLSA (Supply-chain Levels for Software Artifacts).
sigstore is widely adopted in the cloud-native ecosystem and integrates with tools like Kubernetes, container registries, CI/CD pipelines, and package managers. It is commonly used to sign container images, Helm charts, binaries, and SBOMs, and is increasingly becoming a baseline security requirement for production software delivery.
The project is governed by the OpenSSF (Open Source Security Foundation) and supported by major industry players.
