Search: github.com/sigstore | Heykuki News

Heykuki News

Top New Best Ask Show Jobs

Top New Best Ask Show Jobs

1.

Signing Git Commits – Three Ways (github.com/sigstore)

5 points

5 years ago

2.

Sigstore the Hard Way (github.com/lukehinds)

4 points

4 years ago

3.

Container signing: Why not use blockchain? (github.com/sigstore)

3 points

4 years ago

4.

Rekor – Secure Supply Chain Transparency Log (github.com/sigstore)

2 points

5 years ago

5.

Gitsign: Keyless Git signing using Sigstore (github.com/sigstore)

1 point

a year ago

6.

Cosign on the Next Level (github.com/sigstore)

1 point

3 years ago

7.

Secure Supply Chain – Transparency Log (github.com/sigstore)

1 point

5 years ago

8.

RFC for Sigstore Rubygems Signing (github.com/rubygems)

13 points

4 years ago

9.

Cosigned: K8s admission controller, verify images are signed by SigStore cosign (github.com/dlorenc)

3 points

5 years ago

10.

Pacman-bintrans – Experimental binary transparency for pacman via sigstore/rekor (github.com/kpcyrd)

2 points

4 years ago

11.

Pacman-bintrans – Experimental binary transparency for pacman via sigstore/rekor (github.com/kpcyrd)

1 point

4 years ago

12.

Sigsum vs. Sigstore a frequently asked question (github.com/sigsum)

1 point

4 years ago

13.

I scanned 2,500 Hugging Face models for malware/issues. Here is the data (github.com/ArseniiBrazhnyk)

24 points

4 months ago

14.

MetaGenesis Core – offline verification for computational claims (metagenesis-core.dev)

15 points

3 months ago

15.

Show HN: Constellation – An always encrypted Kubernetes engine (github.com/edgelesssys)

14 points

4 years ago

16.

Ask HN: Code signing open source windows applications?

6 points

4 years ago

17.

Show HN: Enact – A package manager for AI agent tools (enact.tools)

6 points

5 months ago

18.

Show HN: Nono – Kernel-enforced sandboxing for AI agents (nono.sh)

4 points

4 months ago

19.

Show HN: Driftcop – Open-source CLI SAST for "MCP rug pull attacks in AI Agents" (github.com/sudoviz)

4 points

10 months ago

20.

ReleaseGuard – scan and harden your dist/ before it ships (open source)

3 points

3 months ago

21.

Show HN: Vett – Scan, sign, and verify AI agent skills before installing (vett.sh)

3 points

4 months ago

22.

Show HN: SafeInstall – local install-time guardrails for NPM/pnpm/bun (safeinstall.dev)

2 points

MichaelLabitzke

2 months ago

23.

Show HN: ESP CI Runner Cryptographically signed evidence for pipelines (github.com/scanset)

2 points

5 months ago

24.

Show HN: Nono – Kernel-enforced sandboxing for AI agents (github.com/lukehinds)

1 point

4 months ago

25.

Stop trusting torch.load() – I built a tool to scan AI models for RCE (github.com/ArseniiBrazhnyk)

1 point

5 months ago

26.

Show HN: Signed lockfiles for MCP servers (MCPTrust) (github.com/mcptrust)

1 point

6 months ago