MDA TCH DA Damini Bansal · Dev Genius Sigstore — Let’s Encrypt, But for Code Signing In March 2024, a backdoor was discovered in XZ Utils — a compression library installed on virtually every Linux system on earth. A…
SCI ECO KA Kawaldeep Singh Practical Software Supply-Chain Security (2026): SBOMs, Signing, SLSA & Reproducible Builds — A… Modern breaches don’t usually target your app’s code — they attack the build pipeline, package registry, or CI artifacts. Fixing that…
TCH ECO SOC SA Sachin Sampras M Securing Containers with Sigstore Stack: A Step-by-Step Guide to Signing and Attesting Images In today’s software supply chain, building containers isn’t enough — you need to prove they haven’t been tampered with and show what’s…
ECO SOC DE developer-guy · GoReleaser GoReleaser And Software Supply Chain Security Before talking about the security of the software supply chains, we should mention what should come to our minds first when we are talking…
