DEV Community

Stacklok profile image Ariel
Ariel for Stacklok

Posted on • Edited on

Unlocking secure software distribution with Minder and GitHub Artifact Attestations

#sigstore #opensource

Yesterday, GitHub announced an important new security feature called GitHub Artifact Attestations. It's powered by sigstore (a technology created by our CTO, Luke Hinds) and it helps developers generate and verify signed attestations for anything made with GitHub Actions.

We participated in the private beta for this and have already integrated support into Minder. Specifically, you can now use Minder to apply enhanced security policies using the contents of these signed attestations—for example, validating SBOM data like licenses, or verifying the results of an attested security scan.

Here are some more details on this feature, and tutorials on how to verify signed attestations and apply policies using attestation data in Minder: More info here

Image description

Image description

profile
Sentry
 Promoted

Sentry image

Hands-on debugging session: instrument, monitor, and fix

Join Lazar for a hands-on session where you’ll build it, break it, debug it, and fix it. You’ll set up Sentry, track errors, use Session Replay and Tracing, and leverage some good ol’ AI to find and fix issues fast.

RSVP here →

Top comments (0)

profile
Neon
 Promoted

Billboard image

Create up to 10 Postgres Databases on Neon's free plan.

If you're starting a new project, Neon has got your databases covered. No credit cards. No trials. No getting in your way.

Try Neon for Free →

Read next

mikeyoung44 profile image

Study Shows Major AI Models Fail at Most Chinese Minority Languages, GPT-4 Leads Limited Success

Mike Young -

mikeyoung44 profile image

AI Image Models Are Secretly GAN Discriminators, New Study Reveals Better Training Method

Mike Young -

mikeyoung44 profile image

Web AI Agents Have 3x Higher Security Risk Than Traditional AI Models, Study Shows

Mike Young -

mikeyoung44 profile image

New AI System Cuts Air Traffic Control Speech Recognition Errors by 45% Across Global Accents

Mike Young -

👋 Kindness is contagious

Please leave a ❤️ or a friendly comment on this post if you found it helpful!

Okay