Hackernews posts about Sigstore

  1. Sigstore, the Swiss army knife of signing and attestation (kernwerk.org)
    3 points by pdubouilh 22 days ago | 1 comments
  2. Sigstore Cosign signature verifier in 150 lines of C (github.com)
    3 points by pdubouilh 19 days ago | discuss
  3. Sigstore: Making sure your software is what it claims to be (www.sigstore.dev)
    119 points by saikatsg over 1 year ago | 45 comments
  4. Fremforge: Forgejo-based, EU-hosted Git/CI with its own Sigstore instance (www.frem.sh)
    5 points by finegrainlabs about 2 months ago | discuss
  5. Sigstore is an open source project for improving software supply chain security (docs.sigstore.dev)
    4 points by mooreds 3 months ago | discuss
  6. The Challenges of Building a Sigstore Implementation from Scratch [video] (www.youtube.com)
    4 points by mooreds over 1 year ago | discuss
  7. Building Cryptographic Agility into Sigstore (blog.trailofbits.com)
    3 points by CiPHPerCoder 7 months ago | 1 comments
  8. Show HN: Enact – NPM for AI Tools with Sigstore and Dagger (enact.tools)
    3 points by kgroves88 8 months ago | 1 comments
  9. Maven Central Adds Sigstore Signature Validation (socket.dev)
    3 points by feross over 1 year ago | discuss
  10. Witnessing Sigstore's transparency log from the Ethereum blockchain (su3.io)
    3 points by losfair almost 2 years ago | discuss
  11. Building Cryptographic Agility into Sigstore (blog.trailofbits.com)
    2 points by tatersolid 7 months ago | discuss
  12. Gitsign: Keyless Git signing using Sigstore (github.com)
    1 points by soraminazuki over 1 year ago | 1 comments
  13. Sigstore is an open source project for improving software supply chain security (docs.sigstore.dev)
    1 points by ahamez over 1 year ago | discuss
  14. Witnessing Sigstore's transparency log from the Ethereum blockchain (su3.io)
    1 points by losfair almost 2 years ago | discuss
  15. Launch HN: Tinfoil (YC P25): Verifiable Privacy for Cloud AI
    146 points by FrasiertheLion over 1 year ago | 100 comments
  16. I scanned 2,500 Hugging Face models for malware/issues. Here is the data (github.com)
    24 points by arseniibr 7 months ago | 19 comments
  17. MetaGenesis Core – offline verification for computational claims (www.metagenesis-core.dev)
    15 points by Lama9901 5 months ago | 18 comments
  18. Show HN: Enact – A package manager for AI agent tools (enact.tools)
    6 points by keithgroves 8 months ago | 2 comments
  19. Show HN: Nono – Kernel-enforced sandboxing for AI agents (nono.sh)
    4 points by decodebytes 7 months ago | 5 comments
  20. Show HN: Driftcop – Open-source CLI SAST for "MCP rug pull attacks in AI Agents" (github.com)
    4 points by vinaypanghal about 1 year ago | 1 comments
  21. ReleaseGuard – scan and harden your dist/ before it ships (open source)
    3 points by Helixar 5 months ago | discuss
  22. Show HN: Vett – Scan, sign, and verify AI agent skills before installing (vett.sh)
    3 points by nikon 6 months ago | discuss
  23. Show HN: SafeInstall – local install-time guardrails for NPM/pnpm/bun (www.safeinstall.dev)
    2 points by MichaelLabitzke 4 months ago | discuss
  24. Show HN: ESP CI Runner Cryptographically signed evidence for pipelines (github.com)
    2 points by scanset 8 months ago | discuss
  25. Show HN: Nono – Kernel-enforced sandboxing for AI agents (github.com)
    1 points by decodebytes 7 months ago | discuss
  26. Stop trusting torch.load() – I built a tool to scan AI models for RCE (github.com)
    1 points by arseniibr 7 months ago | discuss
  27. Show HN: Signed lockfiles for MCP servers (MCPTrust) (github.com)
    1 points by Dtang19 8 months ago | discuss
  28. Rekor – immutable tamper resistant metadata ledger (github.com)
    2 points by gregsadetsky about 2 months ago | discuss