Topic

Cosign

All digests tagged Cosign

Suggested route

Topic journey

Move from earlier context through the available material to the newest signals. This route is a reading aid, not a difficulty ranking.

Start here

From "Trust Me" to "Verify Me" - Tom van den Berg - NDC Copenhagen 2026 Aug 11, 2026 · 54:29 Modern software supply chain attacks start in your build pipeline. We explore how provenance and attestation turn “trust me” into verifiable evidence, using SLSA and OCI registries.

NDC Conferences

From "Trust Me" to "Verify Me" - Tom van den Berg - NDC Copenhagen 2026

Modern software supply chain attacks start in your build pipeline. We explore how provenance and attestation turn “trust me” into verifiable evidence, using SLSA and OCI registries.

Read article