sigstore/rekor
View on GitHub ↗ ★ 1,230 Go
Software Supply Chain Transparency Log
12 mentions on Hacker News by 8 people: 3 stories, 9 comments · first 2021-03-21 · latest 2026-06-29
20082026
-
…//storage.googleapis.com/gweb-research2023-media/pubto... https://docs.sigstore.dev/logging/overview/ https://github.com/sigstore/rekor
comment by ramoz · 2024-12-18 · in On-silicon real-time AI compute governance from Nvidia, Intel, EQTY Labs -
…anyone can check that what you’ve put out there went through all the checks needed to be authentic. https://github.com/sigstore/rekor
comment by westurner · 2022-07-15 · in Freezing Requirements with Pip-Tools -
Dan's team and Google has worked with our team on implementation of the DSSE spec, see https://github.com/sigstore/rekor/pull/596 . I really don't understand the rent seeking argument. It is made completely without basis. However, I'd love…
comment by colek42 · 2022-01-16 · in You shouldn't have your crypto designed by a CEO -
…about it[1] from March (which lists only "GPG, x509 and Minisign") is already out of date. [0] https://github.com/sigstore/rekor/blob/main/types.md#ssh [1] https://www.techrepublic.com/article/a-new-linux-foundation-...
comment by dane-pgp · 2021-11-13 · in Sign arbitrary data with your SSH keys -
…describes itself as a "Secure Supply Chain - Transparency Log"). [0] https://transparency.dev/ [1] https://github.com/sigstore/rekor
comment by dane-pgp · 2021-06-21 · in SLSA, an End-to-End Framework for Supply Chain Integrity -
Rekor is just that. It's a merkle tree implementation (with extras such as timestamping) https://github.com/sigstore/rekor
comment by decodebytes · 2021-05-25 · in Immudb 1.0 – open-source, immutable database with SQL and verified timetravel -
…a transparency log, you get much better guarantees around inclusion proof (it uses a merkle tree): https://github.com/sigstore/rekor
comment by decodebytes · 2021-05-25 · in Immudb 1.0 – open-source, immutable database with SQL and verified timetravel -
…built specifically for software supply chain transparency (disclaimer I am one of the community): https://github.com/sigstore/rekor
comment by decodebytes · 2021-05-25 · in Immudb 1.0 – open-source, immutable database with SQL and verified timetravel -
The rekor project under sigstore is interesting in this regard: https://github.com/sigstore/rekor Its listed as a signature transparency log, but they support some sort of custom manifest system, so you can set your own schema in your…
comment by playcache · 2021-03-21 · in The world needs a software bill of materials