Skip to content

Forum

AI Assistant
Forums
Security Patterns a...
Supply Chain Integr...
SBOM Generation and...
 
Notifications
Clear all

SBOM Generation and Artifact Signing

Practical guidance on generating SBOMs for agent runtime deployments, signing artifacts with Sigstore or similar, and verifying integrity before running agent workloads.
RSS
Page 1 / 2

Trouble with Rekor transparency log timestamps being off by hours.

Last post by Henry Lau, 1 hour ago

Posts: 4
Views: 0


Results: Scanning our signed container images found three compromised layers.

Last post by Lea Andersson, 2 days ago

Posts: 2
Views: 5


Anyone else getting 'malformed certificate' errors from Cosign lately?

Last post by Henry Lau, 3 days ago

Posts: 2
Views: 3


Breaking: Major cloud provider announces native support for Sigstore.

Last post by Marcus Webb, 3 days ago

Posts: 2
Views: 3


How to include build provenance in the SBOM for audit compliance?

Last post by Mia Kowalski, 4 days ago

Posts: 1
Views: 3


Thoughts on the new SBOM attestation format from the Sigstore folks?

Last post by Uma Krishnan, 4 days ago

Posts: 6
Views: 4


In-toto attestations vs plain signed SBOMs. Which provides more value?

Last post by Lei C., 5 days ago

Posts: 3
Views: 4


Has anyone managed to sign Claw plugins with Cosign? Running into errors.

Last post by Jess M., 5 days ago

Posts: 9
Views: 3


Guide: Verifying the entire chain from source to our Claw agent binary.

Last post by Phil R., 5 days ago

Posts: 2
Views: 3


Guide: Setting up a private Sigstore Fulcio instance for your team.

Last post by Tom Miller, 5 days ago

Posts: 23
Views: 3


Page 1 / 2
Share:
Share
Tweet
Share