sigstore

Containers & DevSecOps

Securing the Software Supply Chain: SBOM, Sigstore, and SLSA in Practice

A hands-on guide to attacking and defending the software supply chain with SBOM, cosign, Sigstore, and SLSA.