Dan Lorenc·Jan 24A Gentle Introduction to multiclaude*Or: How I Learned to Stop Worrying and Let the Robots Fight*A response icon1A response icon1
InsigstorebyDan Lorenc·May 3, 2022Kubernetes signals massive adoption of Sigstore for protecting open source ecosystemKubernetes 1.24 will be the first release officially using Sigstore, enabling seamless verification of signatures to protect against supply…
InsigstorebyDan Lorenc·Jan 28, 2022Sigstore ❤ Ruby!We started the Sigstore project with a goal of making key management, certificates, and digital signatures accessible and easy to use for…
Dan Lorenc·Dec 9, 2021The Sigstore Trust ModelI hope this post can help reduce confusion around exactly how Sigstore’s trust model works, and how trust flows from the community root…
Dan Lorenc·Nov 8, 2021Notary V2 and CosignThis post is to help reduce confusion between the Notary V2/Notation and Cosign projects. This is a common question from end users that I…A response icon2A response icon2
InsigstorebyDan Lorenc·Oct 29, 2021Spooky October Updates for Sigstore!October is almost done, so it’s time for another update! The supply chains are clearly haunted, so this one has a spooky theme.
Dan Lorenc·Oct 2, 2021Zero Trust Supply Chain SecurityThis post accompanies a talk I just gave at the 2021 Open Source Summit, called Zero Trust Supply Chain Security. The slides are available…A response icon1A response icon1
Dan Lorenc·Sep 16, 2021A Bit of Ambiance comes to SigstoreZero-trust security starts with trusting actual entities based on strong identity, not whoever happens to control a secret, or whoever gets…
Dan Lorenc·Aug 22, 2021Improving TOFU With TransparencyTOFU is an OK substitute for when you have nothing better, but it’s never the best choice.
