Sigstore is a new Linux Foundation project described as "Let's Encrypt for Code Signing". The tool is developed by Google, Red Hat, and Smallstep, and is designed to offer better provenance for code.

A monthly overview of things you need to know as an architect or aspiring architect. Unlock the full InfoQ experience by logging in! Stay updated with your favorite authors and topics, engage with ...

The Linux Foundation's sigstore code-signing software, developed with Google, Red Hat and Purdue University, will help prevent attacks on the software supply chain. The Linux Foundation has launched a ...

Microsoft Defender is detecting legitimate DigiCert root certificates as Trojan:Win32/Cerdigent.A!dha, resulting in widespread false-positive alerts, and in some ...

Imagine that, for whatever reason, you hear you’re the target of an elite cyber-mafia. You don’t take it seriously until you’re driving down the freeway and suspect someone has tampered with your ...