Lyt når som helst, hvor som helst

Dyk ned i over 1 million e- og lydbøger samt podcasts.

  • Over 1 million titler
  • Eksklusive titler + Mofibo Originals
  • Download og nyd titler offline
  • Opsig når som helst
Prøv nu
DK - Details page - Device banner - 894x1036
Cover for Sigstore Cosign Essentials: The Complete Guide for Developers and Engineers

Sigstore Cosign Essentials: The Complete Guide for Developers and Engineers

Sprog
Engelsk
Format
Kategori

Fakta

"Sigstore Cosign Essentials"

In an era marked by escalating software supply chain threats and ever-evolving attack vectors, "Sigstore Cosign Essentials" provides a comprehensive exploration of modern artifact signing and verification strategies for the cloud-native world. The book opens with a sobering look at recent supply chain incidents and introduces foundational concepts like cryptographic trust, non-repudiation, and the critical role of transparency in security. It bridges the gap between legacy code signing approaches and robust, distributed trust systems such as Sigstore, emphasizing how public ledgers and transparency logs fundamentally reshape trust in software delivery.

Delving into Sigstore’s architecture, the book meticulously breaks down its primary components—Cosign for signing and verification, Fulcio for ephemeral certificate authority, and Rekor for immutable transparency logs. Readers gain hands-on proficiency with Cosign’s powerful CLI, learning to manage key pairs, leverage identity-based keyless signing, implement multi-party workflows, and tailor signature payloads for attestation and provenance. Subsequent chapters guide practitioners through real-world CI/CD integrations, enforcing supply chain policies, handling revocation and expiry, and optimizing signature management across popular artifact registries and cloud platforms.

Balancing security rigor with operational pragmatism, "Sigstore Cosign Essentials" addresses advanced topics such as threat modeling, zero trust design, performance engineering, scaling for multi-tenancy, and extending Cosign’s capabilities through plugins and custom workflows. With forward-looking insights into regulatory adoption, interoperability, and emerging standards, this essential reference equips engineers, DevOps professionals, and security architects with the strategies and tools needed to establish resilient, transparent, and high-integrity software supply chains for the future.

© 2025 HiTeX Press (E-bog): 6610001023218

Udgivelsesdato

E-bog: 19. august 2025

Tags

    Vælg dit abonnement

    • Over 1 million titler

    • Download og nyd titler offline

    • Eksklusive titler + Mofibo Originals

    • Børnevenligt miljø (Kids Mode)

    • Det er nemt at opsige når som helst

    Den mest populære

    Premium

    For dig som lytter og læser ofte.

    129 kr. /måned

    • Eksklusivt indhold hver uge

    • Fri lytning til podcasts

    • Ingen binding

    Start tilbuddet

    Unlimited

    For dig som lytter og læser ubegrænset.

    159 kr. /måned

    • Eksklusivt indhold hver uge

    • Fri lytning til podcasts

    • Ingen binding

    Start tilbuddet

    Family

    For dig som ønsker at dele historier med familien.

    Fra 179 kr. /måned

    • Fri lytning til podcasts

    • Kun 39 kr. pr. ekstra konto

    • Ingen binding

    Dig + 1 familiemedlem2 konti

    179 kr. /måned

    Start tilbuddet

    Flex

    For dig som vil prøve Mofibo.

    89 kr. /måned

    • Gem op til 100 ubrugte timer

    • Eksklusivt indhold hver uge

    • Fri lytning til podcasts

    • Ingen binding

    Prøv gratis