Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Announcing a stable release of sigstore-python

blog.trailofbits.com | blog | #supply-chain | #open-source | #cryptography | #python | #code-signing

Summary

Trail of Bits announces the first stable release of sigstore-python, a Sigstore client funded by Google's Open Source Security Team. It offers a usable, reference-quality CLI and Python API that abstract the cryptographic complexity away, leaving developers with two familiar primitives: signing and verifying.
Published
Collected

original ↗

Related coverage

  1. CrowdStrike Extends Endpoint Security to Stop Software Supply Chain Attacks (crowdstrike.com)
  2. From DEF CON Research to Automated Supply Chain Defense, finding npx confusion vulnerabilities with npxconfuse (lab.ctbb.show)
  3. 1Password's AI patching benchmark is misleading (blog.trailofbits.com)
  4. How Trail of Bits helps verify the integrity of your Signal chats (blog.trailofbits.com)
  5. A few notes on AWS Nitro Enclaves: KMS integration (blog.trailofbits.com)
  6. Building cryptographic agility into Sigstore (blog.trailofbits.com)

back