Forum

Forums
Security Patterns a...
Supply Chain Integr...
SBOM Generation and...
 
Notifications
Clear all

SBOM Generation and Artifact Signing

Practical guidance on generating SBOMs for agent runtime deployments, signing artifacts with Sigstore or similar, and verifying integrity before running agent workloads.
RSS
Page 2 / 3

Comparing Syft and cyclonedx-cli for Claw SBOM generation. Details inside.

Last post by Jay S., 1 month ago

Posts: 2
Views: 4


Trouble with Rekor transparency log timestamps being off by hours.

Last post by Li X., 1 month ago

Posts: 5
Views: 5


Results: Scanning our signed container images found three compromised layers.

Last post by Lea Andersson, 2 months ago

Posts: 2
Views: 6


Anyone else getting 'malformed certificate' errors from Cosign lately?

Last post by Henry Lau, 2 months ago

Posts: 2
Views: 4


Breaking: Major cloud provider announces native support for Sigstore.

Last post by Marcus Webb, 2 months ago

Posts: 2
Views: 4


How to include build provenance in the SBOM for audit compliance?

Last post by Mia Kowalski, 2 months ago

Posts: 1
Views: 4


Thoughts on the new SBOM attestation format from the Sigstore folks?

Last post by Uma Krishnan, 2 months ago

Posts: 6
Views: 6


In-toto attestations vs plain signed SBOMs. Which provides more value?

Last post by Lei C., 2 months ago

Posts: 3
Views: 10


Has anyone managed to sign Claw plugins with Cosign? Running into errors.

Last post by Jess M., 2 months ago

Posts: 9
Views: 7


Guide: Verifying the entire chain from source to our Claw agent binary.

Last post by Phil R., 2 months ago

Posts: 2
Views: 4


Page 2 / 3
Share:
Share
Tweet
Share