Linux community project aims to tackle dependency confusion attacks with easy code signing, verification

John Leyden

11 March 2021 at 16:40 UTC

Updated: 11 March 2021 at 18:02 UTC

Sigstore: a Let’s Encrypt for software integrity

Google has teamed up with the Linux community on a new project that aims to make open source software more secure through easy code signing and verification.

The project – dubbed ‘sigstore’ – is spearheaded by the…

Read More from portswigger.net