# rekor

Published articles for rekor.

This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles.

## npm + Sigstore: Making Javascript secure by default

DevFeed: [npm + Sigstore: Making Javascript secure by default](<https://devfeed.tech/articles/npm-sigstore-making-javascript-secure-by-default-13190.md>)

Original publisher: [Read original article](<https://www.chainguard.dev/unchained/npm-sigstore-making-javascript-secure-by-default>)

Published: 2023-04-19T00:00:00Z

Content type: article

Language: en

Sources: [Chainguard: Unchained](<https://devfeed.tech/sources/chainguard-unchained.md>)

Topics: [npm](<https://devfeed.tech/topics/npm.md>), [sigstore](<https://devfeed.tech/topics/sigstore.md>), [JavaScript](<https://devfeed.tech/topics/javascript.md>), [Security](<https://devfeed.tech/topics/security.md>), [Package manager](<https://devfeed.tech/topics/package-manager.md>)

Tags: [javascript](<https://devfeed.tech/tags/javascript.md>), [npm](<https://devfeed.tech/tags/npm.md>), [provenance](<https://devfeed.tech/tags/provenance.md>), [rekor](<https://devfeed.tech/tags/rekor.md>), [secure-by-default](<https://devfeed.tech/tags/secure-by-default.md>), [signing](<https://devfeed.tech/tags/signing.md>), [sigstore](<https://devfeed.tech/tags/sigstore.md>), [software-supply-chain](<https://devfeed.tech/tags/software-supply-chain.md>), [verification](<https://devfeed.tech/tags/verification.md>)

### AI overview

npm announced a public beta for end-to-end signing of npm packages with Sigstore. The integration lets developers verify package build provenance and records signed attestations in the Rekor transparency log.

### Source excerpt

npm launches Sigstore beta for end-to-end package signing, improving developer trust and security.

## New Chainguard Academy tutorial: Cosign the manual way

DevFeed: [New Chainguard Academy tutorial: Cosign the manual way](<https://devfeed.tech/articles/new-chainguard-academy-tutorial-cosign-the-manual-way-13173.md>)

Original publisher: [Read original article](<https://www.chainguard.dev/unchained/new-chainguard-academy-tutorial-cosign-the-manual-way>)

Published: 2023-03-30T00:00:00Z

Content type: tutorial

Language: en

Sources: [Chainguard: Unchained](<https://devfeed.tech/sources/chainguard-unchained.md>)

Topics: [Tutorial](<https://devfeed.tech/topics/tutorial.md>), [sigstore](<https://devfeed.tech/topics/sigstore.md>), [Security](<https://devfeed.tech/topics/security.md>), [supply-chain-security](<https://devfeed.tech/topics/supply-chain-security.md>), [Command-line interface](<https://devfeed.tech/topics/cli.md>), [Software](<https://devfeed.tech/topics/software.md>)

Tags: [algorithm](<https://devfeed.tech/tags/algorithm.md>), [chainguard](<https://devfeed.tech/tags/chainguard.md>), [chainguard-academy](<https://devfeed.tech/tags/chainguard-academy.md>), [cli](<https://devfeed.tech/tags/cli.md>), [cosign](<https://devfeed.tech/tags/cosign.md>), [rekor](<https://devfeed.tech/tags/rekor.md>), [rsa](<https://devfeed.tech/tags/rsa.md>), [security](<https://devfeed.tech/tags/security.md>), [sha-256](<https://devfeed.tech/tags/sha-256.md>), [signing](<https://devfeed.tech/tags/signing.md>), [sigstore](<https://devfeed.tech/tags/sigstore.md>), [software-artifact-signing](<https://devfeed.tech/tags/software-artifact-signing.md>), [transparency-log](<https://devfeed.tech/tags/transparency-log.md>), [trust](<https://devfeed.tech/tags/trust.md>), [tutorial](<https://devfeed.tech/tags/tutorial.md>), [verify](<https://devfeed.tech/tags/verify.md>)

### AI overview

This article introduces a Chainguard Academy tutorial that explains Cosign's blob-signing capabilities. It covers generating an RSA key pair, signing data with SHA-256, uploading signatures to the Rekor transparency log, and verifying the signature.

### Source excerpt

New Chainguard Academy tutorial unpacks Cosign the manual way and explores Cosign's blob signing capabilities.

## Chainguard contributes Rekor Search project to Sigstore

DevFeed: [Chainguard contributes Rekor Search project to Sigstore](<https://devfeed.tech/articles/chainguard-contributes-rekor-search-project-to-sigstore-12936.md>)

Original publisher: [Read original article](<https://www.chainguard.dev/unchained/chainguard-contributes-rekor-search-project-to-sigstore>)

Published: 2023-03-24T00:00:00Z

Content type: article

Language: en

Sources: [Chainguard: Unchained](<https://devfeed.tech/sources/chainguard-unchained.md>)

Topics: [chainguard](<https://devfeed.tech/topics/chainguard.md>), [browser](<https://devfeed.tech/topics/browser.md>), [Code](<https://devfeed.tech/topics/code.md>), [Git](<https://devfeed.tech/topics/git.md>)

Tags: [browser](<https://devfeed.tech/tags/browser.md>), [chainguard](<https://devfeed.tech/tags/chainguard.md>), [git](<https://devfeed.tech/tags/git.md>), [gitsign](<https://devfeed.tech/tags/gitsign.md>), [hash](<https://devfeed.tech/tags/hash.md>), [index](<https://devfeed.tech/tags/index.md>), [open-source-software](<https://devfeed.tech/tags/open-source-software.md>), [rekor](<https://devfeed.tech/tags/rekor.md>), [search](<https://devfeed.tech/tags/search.md>), [sigstore](<https://devfeed.tech/tags/sigstore.md>), [transparency-log](<https://devfeed.tech/tags/transparency-log.md>), [ui](<https://devfeed.tech/tags/ui.md>)

### AI overview

Chainguard is donating its open-source Rekor Search UI project to Sigstore. The browser-based search engine lets users search and sort entries in the public Rekor transparency log by email, hash, entry UUID, or log index, with support for Gitsign signatures and Git commit associations.

### Source excerpt

Chainguard announces its donating the Rekor Search UI project to Sigstore, allowing users to conveniently search entries in the public Rekor transparency log.