Join us

ContentUpdates and recent posts about Sigstore..
News FAUN.dev() Team Trending
@varbear shared an update, 5ย months, 2ย weeks ago
FAUN.dev()

GitHubโ€™s New Raptor Mini Makes Copilot Smarter - and Itโ€™s Free (for Now)

GitHub Copilot Visual Studio Code

GitHub introduces Raptor mini for Copilot in VS Code, expanding AI capabilities for Pro and Free users.

GitHubโ€™s New Raptor Mini Makes Copilot Smarter - and Itโ€™s Free (for Now)
News FAUN.dev() Team
@kaptain shared an update, 5ย months, 2ย weeks ago
FAUN.dev()

Microsoft Defender Now Blocks Pod Privilege Escalation

JFrog Artifactory Microsoft Defender for Cloud

Microsoft Defender for Cloud enhances Kubernetes security with new features, updates container vulnerability re-scan policies, and expands support for Jfrog Artifactory and Docker Hub.

Microsoft Defender Now Blocks Pod Privilege Escalation
Story
@laura_garcia shared a post, 5ย months, 2ย weeks ago
Software Developer, RELIANOID

๐—” ๐—ก๐—ฒ๐˜„ ๐—ฆ๐˜๐—ฟ๐—ฎ๐˜๐—ฒ๐—ด๐—ถ๐—ฐ ๐—ฃ๐—ฎ๐—ฟ๐˜๐—ป๐—ฒ๐—ฟ๐˜€๐—ต๐—ถ๐—ฝ ๐—•๐—ฒ๐—ด๐—ถ๐—ป๐˜€: ๐—ฅ๐—˜๐—Ÿ๐—œ๐—”๐—ก๐—ข๐—œ๐—— ๐˜… ๐—ข๐—ซ๐—ฌ ๐—ฆ๐—ผ๐—น๐˜‚๐˜๐—ถ๐—ผ๐—ป๐˜€

We are thrilled to announce that ๐—ข๐—ซ๐—ฌ ๐—ฆ๐—ผ๐—น๐˜‚๐˜๐—ถ๐—ผ๐—ป๐˜€ โ€” ๐˜”๐˜ข๐˜ญ๐˜ข๐˜บ๐˜ด๐˜ช๐˜ขโ€™๐˜ด ๐˜•๐˜ฐ.๐Ÿญ ๐˜›๐˜ฆ๐˜ค๐˜ฉ๐˜ฏ๐˜ฐ๐˜ญ๐˜ฐ๐˜จ๐˜บ ๐˜š๐˜ฐ๐˜ญ๐˜ถ๐˜ต๐˜ช๐˜ฐ๐˜ฏ ๐˜—๐˜ณ๐˜ฐ๐˜ท๐˜ช๐˜ฅ๐˜ฆ๐˜ณ โ€” is now RELIANOIDโ€™s exclusive partner in Malaysia. This week, we had the pleasure of welcoming part of the ๐—ข๐—ซ๐—ฌ ๐—ฆ๐—ผ๐—น๐˜‚๐˜๐—ถ๐—ผ๐—ป๐˜€ ๐˜๐—ฒ๐—ฎ๐—บ ๐˜๐—ผ ๐—ฆ๐—ฒ๐˜ƒ๐—ถ๐—น๐—น๐—ฒ, where we shared valuable discussions about the future, explored new..

Oxy Solutions and RELIANOID partnership
Story
@laura_garcia shared a post, 5ย months, 2ย weeks ago
Software Developer, RELIANOID

๐Ÿ”’ The Future of Cyber Security โ€“ Newcastle 2025

๐Ÿ“ November 18 | The Glasshouse, Gateshead RELIANOID joins top experts and leaders at this one-day event to explore the UKโ€™s evolving cyber defence strategy โ€” from AI-driven threats to major breach lessons. Meet our team and discover how we strengthen digital resilience with intelligent ADC and secur..

the future of cybersecurity newcastle relianoid
Story
@laura_garcia shared a post, 5ย months, 2ย weeks ago
Software Developer, RELIANOID

๐ŸŒŸ ๐–๐žโ€™๐ซ๐ž ๐‡๐ข๐ซ๐ข๐ง๐ ! ๐‰๐จ๐ข๐ง ๐ญ๐ก๐ž ๐‘๐„๐‹๐ˆ๐€๐๐Ž๐ˆ๐ƒ ๐“๐ž๐š๐ฆ ๐ŸŒŸ

Are you passionate about technology, networking, and innovation? At RELIANOID, weโ€™re building cutting-edge solutions that power secure, scalable, and reliable infrastructures โ€” and weโ€™re looking for talented people to join us on this journey! - Whether youโ€™re an experienced professional or just star..

News FAUN.dev() Team
@devopslinks shared an update, 5ย months, 2ย weeks ago
FAUN.dev()

2025's Cloud Native Reality Check: Who's In, Who's Lagging

As of Q3 2025, 56% of backend developers qualify as cloud native, driven by strong adoption of API gateways and microservices, alongside growing use of hybrid (30%) and multi-cloud (23%) deployments across the developer ecosystem.

Cloud Native Report Q3 2025
Story
@laura_garcia shared a post, 5ย months, 2ย weeks ago
Software Developer, RELIANOID

๐Ÿ” Preparing for the Post-Quantum Era

Quantum computing is no longer a distant threat โ€” itโ€™s a coming reality that could render todayโ€™s encryption obsolete. Post-Quantum Cryptography (PQC) is the next frontier in securing digital infrastructure, and organizations need crypto agility to adapt fast. At RELIANOID, weโ€™re already building fo..

Link
@varbear shared a link, 5ย months, 2ย weeks ago
FAUN.dev()

Dead framework theory

LLM dev tools keep steering straight into React. System prompts hardwire it. Generated code defaults to it. The result? A feedback loop. Tools crank out React, models get trained on more React, and newcomers inherit the bias. Whatโ€™s changing:React isnโ€™t just a framework anymore. Itโ€™s sliding into in.. read more ย 

Dead framework theory
Link
@varbear shared a link, 5ย months, 2ย weeks ago
FAUN.dev()

From web developer to database developer in 10 years

EnterpriseDB is leveling upPostgres Distributed, the spiritual successor topglogical. Now withreplicated DDLandtunable consistencyacross clusters. It's mostly C and Rust under the hood - tight hooks into Postgres internals, with APIs that nod at abstraction but stay close to the core... read more ย 

Link
@varbear shared a link, 5ย months, 2ย weeks ago
FAUN.dev()

The Green Tea Garbage Collector

Go 1.25 drops an experimental GC calledGreen Tea. It flips the script on object traversal - scanning memory pages instead of hopping from object to object. The payoff? Up to40% less GC CPU overheadon real workloads. Bonus: it taps intoAVX-512on newer x86 chips forvectorized scanning. Turns out strea.. read more ย 

The Green Tea Garbage Collector
Sigstore is an open source initiative designed to make software artifact signing and verification simple, automatic, and widely accessible. Its primary goal is to improve software supply chain security by enabling developers and organizations to cryptographically prove the origin and integrity of the software they build and distribute.

At its core, sigstore removes many of the traditional barriers associated with code signing. Instead of managing long-lived private keys manually, sigstore supports keyless signing, where identities are issued dynamically using OpenID Connect (OIDC) providers such as GitHub Actions, Google, or Microsoft. This dramatically lowers operational complexity and reduces the risk of key compromise.

The sigstore ecosystem is composed of several key components:

- Cosign: A tool for signing, verifying, and storing signatures for container images and other artifacts. Signatures are stored alongside artifacts in OCI registries, rather than embedded in them.

- Fulcio: A certificate authority that issues short-lived X.509 certificates based on OIDC identities, enabling keyless signing.

- Rekor: A transparency log that records signing events in an append-only, tamper-evident ledger. This provides public auditability and detection of suspicious or malicious signing activity.

Together, these components allow anyone to verify who built an artifact, when it was built, and whether it has been tampered with, using publicly verifiable cryptographic proofs. This aligns closely with modern supply chain security practices such as SLSA (Supply-chain Levels for Software Artifacts).

sigstore is widely adopted in the cloud-native ecosystem and integrates with tools like Kubernetes, container registries, CI/CD pipelines, and package managers. It is commonly used to sign container images, Helm charts, binaries, and SBOMs, and is increasingly becoming a baseline security requirement for production software delivery.

The project is governed by the OpenSSF (Open Source Security Foundation) and supported by major industry players.