SBOM Generation and Artifact Signing - openclawsecurity.net Forum https://openclawsecurity.net/community/sbom-and-artifact-signing/ openclawsecurity.net Discussion Board en-US Fri, 14 Aug 2026 19:15:48 +0000 wpForo 60 ELI5: How does keyless signing actually work? Where's the key? https://openclawsecurity.net/community/sbom-and-artifact-signing/eli5-how-does-keyless-signing-actually-work-wheres-the-key/ Wed, 15 Jul 2026 14:00:47 +0000 SBOM Generation and Artifact Signing Paul D. https://openclawsecurity.net/community/sbom-and-artifact-signing/eli5-how-does-keyless-signing-actually-work-wheres-the-key/ How do I get a software bill of materials for the entire Claw toolchain? https://openclawsecurity.net/community/sbom-and-artifact-signing/how-do-i-get-a-software-bill-of-materials-for-the-entire-claw-toolchain/ Tue, 14 Jul 2026 16:00:45 +0000 SBOM Generation and Artifact Signing Neo Zhang https://openclawsecurity.net/community/sbom-and-artifact-signing/how-do-i-get-a-software-bill-of-materials-for-the-entire-claw-toolchain/ Thoughts on using Tekton chains for signing Claw pipeline outputs? https://openclawsecurity.net/community/sbom-and-artifact-signing/thoughts-on-using-tekton-chains-for-signing-claw-pipeline-outputs/ Mon, 13 Jul 2026 08:01:07 +0000 SBOM Generation and Artifact Signing Jay Kernel https://openclawsecurity.net/community/sbom-and-artifact-signing/thoughts-on-using-tekton-chains-for-signing-claw-pipeline-outputs/ Walkthrough: Adding artifact signing to our existing Claw deployment pipeline. https://openclawsecurity.net/community/sbom-and-artifact-signing/walkthrough-adding-artifact-signing-to-our-existing-claw-deployment-pipeline/ Mon, 13 Jul 2026 05:00:18 +0000 SBOM Generation and Artifact Signing Dr. Keiko Tanaka https://openclawsecurity.net/community/sbom-and-artifact-signing/walkthrough-adding-artifact-signing-to-our-existing-claw-deployment-pipeline/ Did you see Anchore's new tool? Claims to verify SBOM signatures. https://openclawsecurity.net/community/sbom-and-artifact-signing/did-you-see-anchores-new-tool-claims-to-verify-sbom-signatures/ Sat, 11 Jul 2026 14:00:21 +0000 SBOM Generation and Artifact Signing Fatima Al-Jaber https://openclawsecurity.net/community/sbom-and-artifact-signing/did-you-see-anchores-new-tool-claims-to-verify-sbom-signatures/ SBOM generation for Claw failing on transitive dependencies. Help? https://openclawsecurity.net/community/sbom-and-artifact-signing/sbom-generation-for-claw-failing-on-transitive-dependencies-help/ Fri, 10 Jul 2026 21:00:03 +0000 SBOM Generation and Artifact Signing Phil R. https://openclawsecurity.net/community/sbom-and-artifact-signing/sbom-generation-for-claw-failing-on-transitive-dependencies-help/ Comparing the overhead of SBOM generation for small vs large deployments. https://openclawsecurity.net/community/sbom-and-artifact-signing/comparing-the-overhead-of-sbom-generation-for-small-vs-large-deployments/ Thu, 09 Jul 2026 14:00:21 +0000 SBOM Generation and Artifact Signing Elena Rossi https://openclawsecurity.net/community/sbom-and-artifact-signing/comparing-the-overhead-of-sbom-generation-for-small-vs-large-deployments/ Am I the only one who finds the Sigstore documentation completely opaque? https://openclawsecurity.net/community/sbom-and-artifact-signing/am-i-the-only-one-who-finds-the-sigstore-documentation-completely-opaque/ Mon, 06 Jul 2026 09:01:23 +0000 SBOM Generation and Artifact Signing Aisha Khan https://openclawsecurity.net/community/sbom-and-artifact-signing/am-i-the-only-one-who-finds-the-sigstore-documentation-completely-opaque/ Troubleshooting 'invalid signature: crypto/rsa: verification error'. https://openclawsecurity.net/community/sbom-and-artifact-signing/troubleshooting-invalid-signature-crypto-rsa-verification-error/ Sat, 04 Jul 2026 07:00:13 +0000 SBOM Generation and Artifact Signing Lee H. https://openclawsecurity.net/community/sbom-and-artifact-signing/troubleshooting-invalid-signature-crypto-rsa-verification-error/ Comparing Syft and cyclonedx-cli for Claw SBOM generation. Details inside. https://openclawsecurity.net/community/sbom-and-artifact-signing/comparing-syft-and-cyclonedx-cli-for-claw-sbom-generation-details-inside/ Fri, 03 Jul 2026 22:00:21 +0000 SBOM Generation and Artifact Signing Omar H. https://openclawsecurity.net/community/sbom-and-artifact-signing/comparing-syft-and-cyclonedx-cli-for-claw-sbom-generation-details-inside/