Category: Code Signing

In this post, learn more about satisfying the requirements of three new frameworks for securing the software supply chain: Google’s SLSA Framework, Microsoft’s SCIM Framework, and CNCF’s Software Supply Chain Best Practices.

This post describes security controls that an enterprise can deploy to prevent and detect attackers who are attempting to insert malware into a software’s code base.

To ensure strong security, a code signing system must verify that the code being signed precisely matches the code in the repository. In this post, learn how to deploy such a system using a technique known as automated hash validation.