Mastodawn

Markus Eisele Apr 30, 2023

#gitsign: Keyless Git signing using Sigstore https://github.com/sigstore/gitsign

GitHub - sigstore/gitsign: Keyless Git signing using Sigstore

Keyless Git signing using Sigstore. Contribute to sigstore/gitsign development by creating an account on GitHub.

GitHub

devguy

Mar 18, 2023

3⃣ Third package is #gitsign. gitsign allows you to sign your commit messages by using
@projectsigstore
public-good services with a keyless approach. Now, I'm one o the maintainers of that project in #nixOS!
➡️nix-env -iA nixpkgs.gitsign

devguy

Dec 20, 2022

f you missed the event organized by @chainguard_dev yesterday about #gitsign, #cosign, #tektoncd, and #chains, don't worry; you can still watch it on demand from the Crowdcast platform 👇 Thx to @strongjz for a fantastic talk 👏
https://www.crowdcast.io/c/software-signing

From Build to Prod: Getting Started with Software Signing and Policy Enforcement

Register now for From Build to Prod: Getting Started with Software Signing and Policy Enforcement on crowdcast, scheduled to go live on December 14, 2022, 07:00 PM GMT+1.

crowdcast

devguy

Dec 12, 2022

I've saved my spot for a fantastic event by @strongjz about signing images with @sigstore via @tektoncd chains + commits with #gitsign! 😵‍💫 Do not forget to save your spot to not miss that event organized by @chainguard_dev 👇
https://www.crowdcast.io/c/software-signing

From Build to Prod: Getting Started with Software Signing and Policy Enforcement

Register now for From Build to Prod: Getting Started with Software Signing and Policy Enforcement on crowdcast, scheduled to go live on December 14, 2022, 07:00 PM GMT+1.

crowdcast

FOSSlife Aug 29, 2022

Improve Open Source Project Resilience: Erika Heidi explains how to start using keyless signing with Gitsign https://www.fosslife.org/start-signing-your-commits-gitsign #OpenSource #FOSS #GitHub #Gitsign #commits #SoftwareDevelopment #KeylessSigning

Start Signing your Commits with Gitsign

FOSSlife

Solinvictus

Jun 20, 2022

There's #GitSign also as a simplified version of GPG keys which you can use for signing commits

https://blog.sigstore.dev/introducing-gitsign-9fd3f1b682aa

https://github.com/sigstore/gitsign

Introducing Gitsign - sigstore

Sigstore aims to protect software supply chains by providing tools to make signing easy and transparent. So far, Sigstore has released components such as Fulcio — a certificate authority for issuing…

sigstore