VirtualTam's bookmarks

1. Sigstore - sign. verify. protect. Making sure your software is what it claims to be. 2024-12-30

   tags: cryptography/certificate-authority, cryptography/public-key-infrastructure, cryptography/signature, linux/container

   [ permalink ]

   • sigstore/cosign - Code signing and transparency for containers and binaries
   • sigstore/fulcio - Sigstore OIDC PKI
   • sigstore/rekor - Software Supply Chain Transparency Log