While there is general agreement on the importance of software supply chain security, there is a significant disconnect on how to achieve that goal ...

Chainguard today added a private preview of a Chainguard Enforce Signing service, enabled by the open source Sigstore project, that allows developers to generate digital signatures for software artifacts using identities and ...