sigstore is a non-profit , public good software signing service funded under the OpenSSF. sigstore.dev sigstore@infosec.exchange
Joined March 2021
- Tweets 1,037
- Following 1
- Followers 4,085
- Likes 938
56 Photos and videos
sigstore retweeted
12 Jun 2025
Cosign is a useful tool when signing containers by @projectsigstore / @openssf / @linuxfoundation - now it's really easy to install on Windows, macOS and Linux with pixi :)
12 Jun 2025
Interested in Software Supply Chain Security? We are! That's why we helped to get `cosign` on conda-forge: `cosign` can be used to sign container images or other artifacts with `sigstore`, and you can now easily install it with `pixi global install cosign` 🎉
2
9
1,068
📣 Announcing v1.0 of the model-signing project, developed by the #OpenSSF AI/ML WG! This project enables signing verifying ML models of any size/format using #sigstore, self-signed certs, or key pairs. Read the blog to learn more & get involved: openssf.org/blog/2025/04/04/…
4
13
1,057
sigstore retweeted
30 Jan 2025
@projectsigstore signatures are now validated and distributed by Maven Central! sonatype.com/blog/central-pu…
3
7
481
sigstore retweeted
14 Nov 2024
3
11
812
🏅 With the support of @chainguard_dev as a Gold Sponsor, #SigstoreCon is building a stronger foundation for secure software supply chains. 🙏 Thank you, Chainguard! Join us today: events.linuxfoundation.org/s…
#SupplyChainSecurity
1
3
10
1,024
✨ Grateful for @StacklokHQ as a Gold Sponsor of #SigstoreCon! With their support, we’re pushing the boundaries of open source and supply chain security together.
Join us today: events.linuxfoundation.org/s…
#SupplyChainSecurity
1
1
3
488
Huge thanks to @GoogleOSS for being a Platinum Sponsor of SigstoreCon! Their support for open source and supply chain security continues to drive the industry forward. 💪 #SigstoreCon #SupplyChainSecurity
events.linuxfoundation.org/s…
4
5
869
7 Nov 2024
🚨 SigstoreCon: Supply Chain Day is almost here! Register now to join us on Nov 12 in Salt Lake City for a day of talks about Sigstore, SLSA, SBOMs, and more! events.linuxfoundation.org/s…
1
5
427
23 Oct 2024
Join us at SigstoreCon: Supply Chain Day on Nov 12, co-located with KubeCon NA in SLC! Registration includes a day of engaging talks, lunch, and swag! events.linuxfoundation.org/s…
5
7
683
3 Oct 2024
Announcing the schedule for SigstoreCon: Supply Chain Day! We're looking forward to talks on Sigstore development, package registry security, SBOMs, TUF, and more! Register now for Nov 12, co-located with Kubecon NA in Salt Lake City
events.linuxfoundation.org/s…
6
14
2,267
17 Sep 2024
⏰ Reminder that the CFP for SigstoreCon closes tomorrow, September 18!
events.linuxfoundation.org/s…
4
7
694
13 Sep 2024
The CFP deadline for SigstoreCon has been extended to Wednesday, September 18, 2024 at 11:59 pm Mountain Daylight Time (UTC-6).
events.linuxfoundation.org/s…
5
6
1,101
11 Sep 2024
Reminder, the CFP for SigstoreCon closes on this Friday, September 13, 2024 at 11:59 pm Mountain Daylight Time (UTC-6) / 10:59 pm Pacific Daylight Time events.linuxfoundation.org/s…
2
282
5 Sep 2024
⏰ Reminder folks, the CFP deadline is Sept 13, please submit your talks before then! events.linuxfoundation.org/s…
3
5
1,377
sigstore retweeted
3 Sep 2024
On our last Securi-Taco Tuesday @puerco welcomed @rdcallaw & @haydentherapper from @Google's Open Source Security Team (GOSST) on to chat about how code signing and @projectsigstore secure the software supply chain.
Read the recap & watch the replay here:
stacklok.com/blog/securi-tac…
7
9
1,160
30 Aug 2024
TSC Member @rdcallaw and community chair @haydentherapper from the Google OS Sec Team chatted with @puerco on the @StackLokHQ hosted 🌮 Securi-Taco Tuesdays 📺show. Lot's on sigstore and & software supply chain security. Catch it here: youtube.com/watch?v=JwfTCeBk…
2
5
461
📣 Join us for SigstoreCon: Supply Chain Day!
📍Attendees will learn about simplifying signing & verification for digital artifacts using Sigstore, as well as related software supply chain efforts such as SLSA, and more! Learn more: openssf.org/blog/2024/08/14/…
#OSSSecurity
1
8
14
1,122
15 Aug 2024
Join us for SigstoreCon: Supply Chain Day! Co-located with Kubecon NA 2024 in Salt Lake City. CFP now open events.linuxfoundation.org/s…
7
14
1,152
sigstore retweeted
31 Jul 2024
Powered by @projectsigstore
31 Jul 2024
Secure your cloud-native supply chain with #GitHub Artifact Attestations. Confirm your builds are actually what you want to build!
P.S. You can also achieve SLSA v1 Build Level 3
gh.io/AttestationsBlog
#cloudnative #supplychain #developer #secured
1
1
3
517
sigstore retweeted
1 Aug 2024
Thank you @openuk_uk for the beautiful glass engraved award accepted on behalf of @projectsigstore and @controlplaneio for sponsoring the security category ❤️
3
5
21
1,068