Signing images and artifacts with Sigstore is no longer exotic. How to integrate cosign into a real pipeline without turning signing into empty ritual.
Read morePractical DevSecOps with Sigstore and cosign
Tag: devsecops
SLSA Level 3: Hardening the Software Supply Chain
SLSA v1.0 defines four maturity levels for software supply chain. L3 is achievable and justifies the investment for many teams.
Read more