Supply Chain Security: Sigstore and Cosign (Part II)

The ability to sign and verify the integrity and origin of software artifacts, such as Docker images, is critical to supply chain security. Let's try Sigstore, a new standard that promises to make this process much easier.

The post Supply Chain Security: Sigstore and Cosign (Part II) appeared first on Security Boulevard.

artifacts critical docker images integrity origin process security security boulevard sign sigstore software standard supply supply chain supply chain security tutorials verify