Research

Sigstore Research #

• Sigstore: Software Signing for Everybody

Software Supply Chain Research #

Academic and industry research related to software supply chain security, transparency, reproducibility, and more:

• Software Distribution Transparency and Auditability
• Contour: A Practical System for Binary Transparency
• Reproducible Builds: Break a log, good things come in trees
• Dependency Issues: Solving the World’s Open-Source Software Security Problem
• Software Supply-Chain Security Reading List