# Workload Identity Meets Supply Chain Security: Teleport's Sigstore Integration

DevFeed: [Workload Identity Meets Supply Chain Security: Teleport's Sigstore Integration](<https://devfeed.tech/articles/workload-identity-meets-supply-chain-security-teleport-s-sigstore-integration-29974.md>)

Original publisher: [Read original article](<https://goteleport.com/blog/workload-identity-meets-supply-chain-security/>)

Author: daniel.upton@goteleport.com (Dan Upton)

Published: 2025-06-05T00:00:00Z

Content type: tutorial

Language: en

Sources: [Teleport](<https://devfeed.tech/sources/teleport.md>)

Topics: [sigstore](<https://devfeed.tech/topics/sigstore.md>), [supply-chain-security](<https://devfeed.tech/topics/supply-chain-security.md>), [Security](<https://devfeed.tech/topics/security.md>), [OpenID connect (OIDC)](<https://devfeed.tech/topics/oidc.md>), [GitHub Actions](<https://devfeed.tech/topics/github-actions.md>)

Tags: [attestation](<https://devfeed.tech/tags/attestation.md>), [github-actions](<https://devfeed.tech/tags/github-actions.md>), [oidc](<https://devfeed.tech/tags/oidc.md>), [provenance](<https://devfeed.tech/tags/provenance.md>), [security](<https://devfeed.tech/tags/security.md>), [signing](<https://devfeed.tech/tags/signing.md>), [sigstore](<https://devfeed.tech/tags/sigstore.md>), [supply-chain](<https://devfeed.tech/tags/supply-chain.md>), [supply-chain-security](<https://devfeed.tech/tags/supply-chain-security.md>)

## AI overview

This article explains how Teleport integrates with Sigstore to strengthen software supply chain security for workload identity. It describes signing software artifacts and attestations, and explains Sigstore's keyless approach using single-use certificates tied to OIDC identities.

## Source excerpt

Learn how to use Teleport's integration with Sigstore to build supply chain security into your workload identity.