Tag

signing

Safeguard articles tagged "signing" — guides, analysis, and best practices for software supply chain and application security.

25 articles

Best Practices

A First-Principles Guide to Artifact Signing in 2022

Artifact signing is having a moment, but most teams skip the fundamentals. Here is the first-principles case for why you sign, what you sign, and who verifies.

Mar 20, 20226 min read