Sigstore is a Linux Foundation project developed by Google and Red Hat for code signing
Sigstore is a Linux Foundation project developed by Google and Red Hat for code signing Mar 10, 2021 00:30 EST with 0 comments An inherent weakness of open source code is that it's difficult to determine its provenance and how it was built, which means that it's prone to supply chain attacks. Google aims to solve this problem which is why it has collaborated with Red Hat and Smallstep to introduce Sigstore (stylized "sigstore") in the Linux Foundation, making it easier to digitally sign and verify source code. Additionally, all sigstore certifications and attestati...
Source: neowin.net