Sigstore is a Linux Foundation project developed by Google and Red Hat for code signing
Sigstore is a Linux Foundation project developed by Google and Red Hat for code signing Mar 10, 2021 00:30 EST with 0 comments An inherent weakness of open source code is that its difficult to determine its provenance and how it was built, which means that its prone to supply chain attacks. Google aims to solve this problem which is why it has collaborated with Red Hat and Smallstep to introduce Sigstore (stylized "sigstore") in the Linux Foundation, making it easier...
Luke Hinds Red Hat Root Certificate Authority Linux Foundation Transparency Logs Security Engineering Lead Luke Hinds
Source: neowin.net