--- title: "Sigstore: Secure and Scalable Infrastructure for Signing and Verifying Software" url: https://daily.dev/posts/sigstore-secure-and-scalable-infrastructure-for-signing-and-verifying-software-pfg2wcn2n source_url: https://www.infoq.com/presentations/scalable-infrastructure-sigstore/ type: article source: "InfoQ" published: 2024-02-29T09:33:04.875Z updated: 2024-05-09T09:21:59.549Z tags: ["open-source", "devops", "architecture", "supply-chain", "qcon"] reading_time: 26 upvotes: 0 comments: 0 language: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Sigstore: Secure and Scalable Infrastructure for Signing and Verifying Software **[InfoQ](https://daily.dev/sources/infoq)** · 26 min read · 0 upvotes · 0 comments ## Summary Sigstore is an open-source project that aims to make software signing easy and readily available for people to use. It integrates with existing key management solutions and introduces the concept of keyless signing, focusing on identities rather than individual keys. Sigstore is widely supported in open-source software but not widely used. It offers improvements in key management, compromise detection, revocation, and identity verification. Many organizations, including Kubernetes, npm, and CPython, are already using Sigstore. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [Don’t just attend KubeCon \+ CloudNativeCon, Merge Forward your experience\!](https://daily.dev/posts/don-t-just-attend-kubecon-cloudnativecon-merge-forward-your-experience--l0rpp73x8) · CNCF · 0 upvotes · 0 comments - [Announcing H2 2026 KCDs](https://daily.dev/posts/announcing-h2-2026-kcds-m96goajm1) · CNCF · 1 upvotes · 0 comments - [Two months of Open Community Groups](https://daily.dev/posts/two-months-of-open-community-groups-asf52zhbs) · CNCF · 0 upvotes · 0 comments --- Tags: [#open-source](https://daily.dev/tags/open-source), [#devops](https://daily.dev/tags/devops), [#architecture](https://daily.dev/tags/architecture), [#supply-chain](https://daily.dev/tags/supply-chain), [#qcon](https://daily.dev/tags/qcon) [View this post on daily.dev](https://daily.dev/posts/sigstore-secure-and-scalable-infrastructure-for-signing-and-verifying-software-pfg2wcn2n)