Hacker GitHub

← All repos

sigstore/rekor

View on GitHub ↗ ★ 1,230 Go

Software Supply Chain Transparency Log

12 mentions on Hacker News by 8 people: 3 stories, 9 comments · first 2021-03-21 · latest 2026-06-29

Mentions per year 12 mentions · busiest year 2021 (8)
20082026
AllStoriesComments NewestTopOldest
  1. ▲ 2
    Rekor – immutable tamper resistant metadata ledger
    story by gregsadetsky · 2026-06-29 · 0 comments
  2. …//storage.googleapis.com/gweb-research2023-media/pubto... https://docs.sigstore.dev/logging/overview/ https://github.com/sigstore/rekor
    comment by ramoz · 2024-12-18 · in On-silicon real-time AI compute governance from Nvidia, Intel, EQTY Labs
  3. …anyone can check that what you’ve put out there went through all the checks needed to be authentic. https://github.com/sigstore/rekor
    comment by westurner · 2022-07-15 · in Freezing Requirements with Pip-Tools
  4. Dan's team and Google has worked with our team on implementation of the DSSE spec, see https://github.com/sigstore/rekor/pull/596 . I really don't understand the rent seeking argument. It is made completely without basis. However, I'd love…
    comment by colek42 · 2022-01-16 · in You shouldn't have your crypto designed by a CEO
  5. …about it[1] from March (which lists only "GPG, x509 and Minisign") is already out of date. [0] https://github.com/sigstore/rekor/blob/main/types.md#ssh [1] https://www.techrepublic.com/article/a-new-linux-foundation-...
    comment by dane-pgp · 2021-11-13 · in Sign arbitrary data with your SSH keys
  6. ▲ 1
    Secure Supply Chain – Transparency Log
    story by adulau · 2021-08-19 · 0 comments
  7. …describes itself as a "Secure Supply Chain - Transparency Log"). [0] https://transparency.dev/ [1] https://github.com/sigstore/rekor
    comment by dane-pgp · 2021-06-21 · in SLSA, an End-to-End Framework for Supply Chain Integrity
  8. ▲ 2
    Rekor – Secure Supply Chain Transparency Log
    story by decodebytes · 2021-05-25 · 0 comments
  9. Rekor is just that. It's a merkle tree implementation (with extras such as timestamping) https://github.com/sigstore/rekor
    comment by decodebytes · 2021-05-25 · in Immudb 1.0 – open-source, immutable database with SQL and verified timetravel
  10. …a transparency log, you get much better guarantees around inclusion proof (it uses a merkle tree): https://github.com/sigstore/rekor
    comment by decodebytes · 2021-05-25 · in Immudb 1.0 – open-source, immutable database with SQL and verified timetravel
  11. …built specifically for software supply chain transparency (disclaimer I am one of the community): https://github.com/sigstore/rekor
    comment by decodebytes · 2021-05-25 · in Immudb 1.0 – open-source, immutable database with SQL and verified timetravel
  12. The rekor project under sigstore is interesting in this regard: https://github.com/sigstore/rekor Its listed as a signature transparency log, but they support some sort of custom manifest system, so you can set your own schema in your…
    comment by playcache · 2021-03-21 · in The world needs a software bill of materials