Back to article
sigstore.dev

Sigstore: Making sure your software is what it claims to be (opens in new tab)

Covered by 8 sources See all sources covering this story including chainguard.dev, DEV CommunityDiscussed on Hacker News

Covered in 9 articles

chainguard.dev·

The hardest fork

Discussed on Hacker News, Hacker News, and Lobsters
Feeds
DEV Community·

Securing the Agentic Supply Chain: Why Provenance is the New Perimeter

Discussed on DEV
Feeds
InfoQ·

TanStack Details Sophisticated npm Supply Chain Attack That Compromised 42 Packages

Feeds
GitHub·

Show HN: CLI for scoring OpenAPI for LLM legibility

Discussed on Hacker News
Feeds
GitHub·

leakferrethq/leakferret: MCP-native secret scanner in one fast Rust binary: engine, CLI, and MCP server. Finds API keys and secrets, skips known-public fixtures, verifies live keys with a real provider call, and applies env-var rewrites. Privacy invariant: the raw secret never leaves disk.

Discussed on r/rust
Feeds
thehackernews.com·

The Hardest Fork

Feeds
redhat.com·

Building the levee: Why Red Hat’s post-quantum strategy is already in production

Feeds
blog.packagist.com·

An Update on Composer and Packagist Supply Chain Security

Discussed on Hacker News
Feeds
Red Hat Emerging Technologies·

Who’s really calling? Securing agent-to-agent communication

Feeds

Keyboard Shortcuts

Navigation

Next / previous post
j/k
Open post
oorEnter
Preview post
v

Post Actions

Love post
a
Like post
l
Dislike post
d
Undo reaction
u
Save / unsave
s

Recommendations

Add interest / feed
Enter
Not interested
x

Go to

Home
gh
Interests
gi
Feeds
gf
Likes
gl
History
gy
Changelog
gc
Settings
gs
Discover
gb
Search
/

General

Show this help
?
Submit feedback
!
Close modal / unfocus
Esc

Press ? anytime to show this help