Keynote: The Meteoric Rise of Sigstore
summary
Project claims rapid, surprising adoption since 2020 with concrete artifacts: a public rekor transparency log approaching six million entries, a signing UX built around cosign and Fulcio keyless identities, and a live free service donated to the Linux Foundation and housed in OpenSSF. Kubernetes standardizes on Sigstore, npm work is underway, contributor and commit rates rise, and metrics show broad HTTPS-style propagation. The team builds automation and abstracts key management so signing actually works at scale rather than remaining an academic proposal.
AI-written summary · about
chapters (8)
- 0:00Introduction
- 1:02Tech reinvention past ideas
- 2:04HTTPS challenges breakthrough
- 4:12Let's Encrypt revolution
- 6:57HTTPS to software supply chain
- 8:00Sigstore mission principles
- 9:04Sigstore adoption timeline
- 10:31Current growth outlook
related talks
40mSigstore: How We Started, Where We Are, Where We are Headed
36mSigstore: Past, Present and Future Directions
29mFrom Cosign to an Ecosystem: The Evolution of Sigstore
37mSigstore, the Open Source Software Signing Service
23mSoftware Supply Chain Integrity with Sigstore
34mPolicy Compliance with Sigstore: From Signing Software to Validating the Whole Softwar...
27mSecuring your Software Supply Chain on Kubernetes with Sigstore
08mKeynote: Security of the Open Source Supply Chain, a Call to Action