Hackernews posts about Sigstore

RSS feed for Sigstore

01
newShow HN: PromptSign – Sigstore signing and verification for AI instruction filespromptsign.ai
▲ 1sergey_v 24d discuss
02
newThe two Christian saints who are the Buddhasignoregalilei.com
▲ 250surprisetalk 26d 💬 206
03
newThe mystery animal on an ancient god's headsignoregalilei.com
▲ 155surprisetalk 13d 💬 44
04
newAntarctica is keeping the ocean alive For nowsignoregalilei.com
▲ 3surprisetalk 9d discuss
05
newThe Earth is missing 3T tons of masssignoregalilei.com
▲ 3surprisetalk 11d discuss
06
newSigstore: Making sure your software is what it claims to bewww.sigstore.dev
▲ 119saikatsg 621d 💬 45
07
newFremforge: Forgejo-based, EU-hosted Git/CI with its own Sigstore instancewww.frem.sh
▲ 5finegrainlabs 95d discuss
08
newSigstore is an open source project for improving software supply chain securitydocs.sigstore.dev
▲ 4mooreds 137d discuss
09
newThe Challenges of Building a Sigstore Implementation from Scratch [video]www.youtube.com
▲ 4mooreds 682d discuss
10
newSigstore, the Swiss army knife of signing and attestationkernwerk.org
▲ 3pdubouilh 66d 💬 1
11
newBuilding Cryptographic Agility into Sigstoreblog.trailofbits.com
▲ 3CiPHPerCoder 248d 💬 1
12
newShow HN: Enact – NPM for AI Tools with Sigstore and Daggerenact.tools
▲ 3kgroves88 298d 💬 1
13
newSigstore Cosign signature verifier in 150 lines of Cgithub.com
▲ 3pdubouilh 64d discuss
14
newMaven Central Adds Sigstore Signature Validationsocket.dev
▲ 3feross 606d discuss
15
newBuilding Cryptographic Agility into Sigstoreblog.trailofbits.com
▲ 2tatersolid 248d discuss
16
newGitsign: Keyless Git signing using Sigstoregithub.com
▲ 1soraminazuki 621d 💬 1
17
newSigstore is an open source project for improving software supply chain securitydocs.sigstore.dev
▲ 1ahamez 584d discuss
18
newLaunch HN: Tinfoil (YC P25): Verifiable Privacy for Cloud AI
▲ 146FrasiertheLion 507d 💬 100
19
newI scanned 2,500 Hugging Face models for malware/issues. Here is the datagithub.com
▲ 24arseniibr 256d 💬 19
20
newMetaGenesis Core – offline verification for computational claimswww.metagenesis-core.dev
▲ 15Lama9901 207d 💬 18
21
newShow HN: Enact – A package manager for AI agent toolsenact.tools
▲ 6keithgroves 278d 💬 2
22
newShow HN: Nono – Kernel-enforced sandboxing for AI agentsnono.sh
▲ 4decodebytes 245d 💬 5
23
newShow HN: Driftcop – Open-source CLI SAST for "MCP rug pull attacks in AI Agents"github.com
▲ 4vinaypanghal 422d 💬 1
24
newReleaseGuard – scan and harden your dist/ before it ships (open source)
▲ 3Helixar 207d discuss
25
newShow HN: Vett – Scan, sign, and verify AI agent skills before installingvett.sh
▲ 3nikon 228d discuss
26
newShow HN: SafeInstall – local install-time guardrails for NPM/pnpm/bunwww.safeinstall.dev
▲ 2MichaelLabitzke 174d discuss
27
newShow HN: ESP CI Runner Cryptographically signed evidence for pipelinesgithub.com
▲ 2scanset 272d discuss
28
newShow HN: Nono – Kernel-enforced sandboxing for AI agentsgithub.com
▲ 1decodebytes 244d discuss
29
newStop trusting torch.load() – I built a tool to scan AI models for RCEgithub.com
▲ 1arseniibr 263d discuss
30
newShow HN: Signed lockfiles for MCP servers (MCPTrust)github.com
▲ 1Dtang19 292d discuss
31
newRekor – immutable tamper resistant metadata ledgergithub.com
▲ 2gregsadetsky 97d discuss
32
newShow HN: SimStream – code iOS apps from your phone by streaming the simulatorgithub.com
▲ 2ea016 134d discuss
33
newThe most official water costs $120k a gallonsignoregalilei.com
▲ 240surprisetalk 65d 💬 188
34
newThe mountain that weighed the Earthsignoregalilei.com
▲ 107surprisetalk 251d 💬 15
35
newYou'll never guess who made the first wireless telephonesignoregalilei.com
▲ 62surprisetalk 122d 💬 16