Project Sigstore is a new supply chain security standard for signing and verifying software.
The growing success of Sigstore has led the community-managed public good instance of the project to reach more than 17 million stored artifacts.
But did you know you could run your own Sigstore instance?
The Sigstore the Hard Way tutorial gives you the steps to deploy Sigstore on a Google Cloud Platform environment using Dex as an identity provider.
However, alternatives exist to configure other OpenID Connect providers to authenticate with Sigstore.
In the following guide, you will learn how to deploy Keycloak, an Open Source Identity and Access Management solution as an alternative to Dex: https://github.com/mayaCostantini/sigstore-keycloak-setup
Top comments (0)