The latest articles on DEV Community by Maya Costantini (@mayacostantini). https://dev.to/mayacostantini https://media2.dev.to/dynamic/image/width=90,height=90,fit=cover,gravity=auto,format=auto/https:%2F%2Fdev-to-uploads.s3.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F664212%2F658f8904-c6bf-49c2-b3c8-4b9e00165120.png https://dev.to/mayacostantini en Maya Costantini Mon, 03 Apr 2023 12:58:48 +0000 https://dev.to/mayacostantini/deploying-sigstore-with-keycloak-24n6 https://dev.to/mayacostantini/deploying-sigstore-with-keycloak-24n6 <p><a href="https://www.sigstore.dev/" rel="noopener noreferrer">Project Sigstore</a> is a new supply chain security standard for signing and verifying software.</p> <p>The growing success of Sigstore has led the community-managed public good instance of the project to reach more than 17 million stored artifacts.</p> <p>But did you know you could run your own Sigstore instance?</p> <p>The <a href="https://sthw.decodebytes.sh/" rel="noopener noreferrer">Sigstore the Hard Way</a> tutorial gives you the steps to deploy Sigstore on a Google Cloud Platform environment using <a href="https://dexidp.io/" rel="noopener noreferrer">Dex</a> as an identity provider. <br> However, alternatives exist to configure other <a href="https://openid.net/connect/" rel="noopener noreferrer">OpenID Connect</a> providers to authenticate with Sigstore.</p> <p>In the following guide, you will learn how to deploy Keycloak, an Open Source Identity and Access Management solution as an alternative to Dex: <a href="https://github.com/mayaCostantini/sigstore-keycloak-setup" rel="noopener noreferrer">https://github.com/mayaCostantini/sigstore-keycloak-setup</a></p> security supplychain sigstore