Join us

ContentUpdates and recent posts about Sigstore..
Story
@laura_garcia shared a post, 5 months, 3 weeks ago
Software Developer, RELIANOID

Azure MFA Enforcement Has Arrived – Are You Ready?

As of October 1, 2025, Microsoft now requires all Azure tenants to use multifactor authentication (MFA) before performing any resource management actions. - The message is clear: MFA is no longer optional—it’s essential everywhere. At RELIANOID, we make MFA enforcement possible not only for Azure bu..

Story
@laura_garcia shared a post, 5 months, 3 weeks ago
Software Developer, RELIANOID

🚀 Why this matters more than ever: Strengthening cybersecurity in space isn’t just a milestone — it’s essential.

The European Space Agency (ESA) recently inaugurated its new Cybersecurity Operations Center (C-SOC) to defend satellites, mission control systems, and digital assets from escalating cyber threats. 🌍 As the reliance on space technology continues to grow, initiatives like this — together with global ..

ESA_Cybersecurity Operations Center
Link
@anjali shared a link, 5 months, 3 weeks ago
Customer Marketing Manager, Last9

How Prometheus Exporters Work With OpenTelemetry

Learn how Prometheus exporters expose OTLP metrics in Prometheus format, making it easier to scrape OpenTelemetry data.

prometheus_exporter
Link
@anjali shared a link, 5 months, 3 weeks ago
Customer Marketing Manager, Last9

What Are AI Guardrails

Learn the core concepts of AI guardrails and how they create safer, more reliable, and well-structured AI systems in production.

grafana_tempo
Story
@laura_garcia shared a post, 5 months, 3 weeks ago
Software Developer, RELIANOID

🚨 AWS Outage Analysis: Lessons in Cloud Resilience

On October 20, 2025, AWS suffered a major disruption in its US-EAST-1 region, impacting over 140 services including EC2, Lambda, S3, and DynamoDB. The root cause? A DNS resolution failure that cascaded through dependent systems — showing how even the strongest cloud infrastructures can falter. At RE..

aws outage
Story
@laura_garcia shared a post, 5 months, 3 weeks ago
Software Developer, RELIANOID

🚀 Deploy RELIANOID Load Balancer Enterprise Edition v8 with Terraform on AWS

Our latest quick guide shows you how to spin up the RELIANOID Enterprise Edition on AWS in just a few commands — using the official Terraform module from the Terraform Registry. You’ll automatically provision: ✅ VPC + Internet Gateway ✅ Public Subnet ✅ Security Group (SSH 22, Web GUI 444) ✅ EC2 Inst..

terraform_relianoid_enterprise_img2
Link
@anjali shared a link, 5 months, 3 weeks ago
Customer Marketing Manager, Last9

Grafana Tempo: Setup, Configuration, and Best Practices

A practical guide to setting up Grafana Tempo, configuring key components, and understanding how to use tracing across your services.

grafana_tempo
Story
@laura_garcia shared a post, 5 months, 4 weeks ago
Software Developer, RELIANOID

🍺 Cyberattack on Asahi Group: A Wake-Up Call for Japan’s Industrial Sector

Just after Japan’s new Active Cyberdefence Law (ACD Law) came into effect — a major step toward reshaping the country’s cybersecurity posture — Japan’s largest brewer, Asahi Group, has suffered a ransomware attack that disrupted production and logistics nationwide. ⚠️ This incident starkly illustrat..

japan_brewery_ransomware_relianoid
Link
@varbear shared a link, 6 months ago
FAUN.dev()

Free software scares normal people

A developer rolled outMagicbrake- a no-fuss GUI forHandbrakeaimed at folks who don’t speak command line. One button. Drag, drop, convert. Done. It strips Handbrake down to the bones for anyone who just wants their video in a different format without decoding flags and presets... read more  

Link
@varbear shared a link, 6 months ago
FAUN.dev()

Aggressive bots ruined my weekend

Bear Blog went dark after getting swarmed by scrapers. The reverse proxy choked first - too many requests, not enough heads-up. Downstream defenses didn’t catch it in time. So: fire, meet upgrades. What changed: Proxies scaled 5×. Upstream got strict with rate limits. Failover now has a pulse. Resta.. read more  

Sigstore is an open source initiative designed to make software artifact signing and verification simple, automatic, and widely accessible. Its primary goal is to improve software supply chain security by enabling developers and organizations to cryptographically prove the origin and integrity of the software they build and distribute.

At its core, sigstore removes many of the traditional barriers associated with code signing. Instead of managing long-lived private keys manually, sigstore supports keyless signing, where identities are issued dynamically using OpenID Connect (OIDC) providers such as GitHub Actions, Google, or Microsoft. This dramatically lowers operational complexity and reduces the risk of key compromise.

The sigstore ecosystem is composed of several key components:

- Cosign: A tool for signing, verifying, and storing signatures for container images and other artifacts. Signatures are stored alongside artifacts in OCI registries, rather than embedded in them.

- Fulcio: A certificate authority that issues short-lived X.509 certificates based on OIDC identities, enabling keyless signing.

- Rekor: A transparency log that records signing events in an append-only, tamper-evident ledger. This provides public auditability and detection of suspicious or malicious signing activity.

Together, these components allow anyone to verify who built an artifact, when it was built, and whether it has been tampered with, using publicly verifiable cryptographic proofs. This aligns closely with modern supply chain security practices such as SLSA (Supply-chain Levels for Software Artifacts).

sigstore is widely adopted in the cloud-native ecosystem and integrates with tools like Kubernetes, container registries, CI/CD pipelines, and package managers. It is commonly used to sign container images, Helm charts, binaries, and SBOMs, and is increasingly becoming a baseline security requirement for production software delivery.

The project is governed by the OpenSSF (Open Source Security Foundation) and supported by major industry players.