Sigstore: Signature verification for protection against supply chain attacks

Software supply chain attacks have been increasing over the past few years, spurring the Biden administration to release an executive order detailing what government agencies are supposed to do to protect themselves against them. These attacks consist of several different types of threats, but the result is always the same: attackers gaining access to run code on your infrastructure or to tamper with the code that you’re using in production. The Sigstore project aims to … More →

The post …

attacks chainguard code don't miss hot stuff kubernetes protection signature sigstore software supply supply chain supply chain attacks supply chain compromise threats verification video