Signatures

Published on
July 17, 2023
Demystifying the OpenShift release image
openshift supply chain release security kubernetes signatures
The OpenShift release image is a critical component of the software supply-chain for OpenShift. In this article I want to take a closer look at the release image, and how it's verified.
Published on
April 14, 2023
Sigstore - Signature Sorcery
sigstore signatures containers kubernetes security
Sigstore is an open source project enabling anyone to sign and validate software releases, including container images. This article takes a closer look at Sigstore and some of the innovation happening around the project.