Announcement
Announcing sbomify v26.2.0: The One That Signs the DoC
In v26.1.0 we shipped the first half of the EU Cyber Resilience Act workflow: figuring out whether you are in scope, and what you need to...
Viktor Petersson
•
May 13. 2026
Read more →Education
What Is Sigstore? Keyless Signing for the Software Supply Chain
Before Sigstore, signing a software artifact meant generating a GPG or PEM key pair, storing the private key securely, distributing the...
Cowboy Neil
•
Aug 12. 2024
Read more →