Sigstore – A new standard for signing, verifying and protecting software

#Google
https://sigstore.dev
This means that open source software uploaded for distribution has a stricter, more standardized way of checking who’s been involved, that it hasn’t been tampered with.With the help of a working partnership that includes Google, the Linux Foundation, Red Hat and Purdue University, we’re in constant collaboration to find new ways to improve the sigstore technology, to make it easy to adopt, integrate and become a long-lasting standard.
Found via HackerNews API
https://github.com/HackerNews/API
See https://news.ycombinator.com/ for this and other awesome articles

#Shorts

source

by Tony Technology

linux foundation