# sigstore Sigstore is an open-source project providing tools and services for signing and verifying software artifacts to improve software supply-chain security. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## What it took to reach 1 billion build manifests DevFeed: [What it took to reach 1 billion build manifests]() Original publisher: [Read original article]() Published: 2026-09-03T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard](), [container images](), [chainguard os](), [supply-chain-security](), [sigstore](), [Linux](), [NumPy]() Tags: [chainguard](), [chainguard-factory](), [chainguard-os](), [container-images](), [go](), [open-source](), [provenance](), [sbom](), [sigstore](), [software-supply-chain]() ### AI overview Chainguard describes how it doubled container build output from 500 million to more than 1 billion manifests in six months. The article explains how Chainguard Factory and Chainguard OS support continuous rebuilds, while using source builds, SLSA Level 3 provenance, Sigstore signatures, and full SBOMs. ### Source excerpt Chainguard doubled its container build output in six months. Learn how Factory 2.0 uses AI and reconciliation to rebuild secure software at scale. ## SOC 2 Controls for Non-Human Identities: CC6, CC7, and CC8 DevFeed: [SOC 2 Controls for Non-Human Identities: CC6, CC7, and CC8]() Original publisher: [Read original article]() Author: info@goteleport.com (Kayne McGladrey) Published: 2026-06-09T00:00:00Z Content type: tutorial Language: en Sources: [Teleport]() Topics: [soc 2](), [audit](), [Authorization](), [sigstore]() Tags: [audit](), [authorization](), [certificates](), [credentials](), [soc-2]() ### AI overview This article explains how Teleport maps workload attestation, short-lived certificates, access rules, and audit logs for non-human identities to SOC 2 controls CC6, CC7, and CC8. It describes evidence auditors can use, including access rules, denied credential issuance logs, and Sigstore policy configurations where enabled. ### Source excerpt Discover how to meet SOC 2 CC6, CC7, and CC8 controls for non-human identities. ## Securely Signing WebAssembly Components with Cosign (OIDC) DevFeed: [Securely Signing WebAssembly Components with Cosign (OIDC)]() Original publisher: [Read original article]() Author: Liam Randall Published: 2025-09-02T00:00:00Z Content type: tutorial Language: en Sources: [wasmCloud Blog]() Topics: [WebAssembly](), [sigstore](), [GitHub Container Registry](), [OpenID connect (OIDC)](), [Rust](), [Command-line interface](), [Authentication](), [Security]() Tags: [authentication](), [cli](), [cosign](), [github-container-registry](), [integrity](), [oci-registry](), [oidc](), [registry](), [security](), [signing](), [sigstore](), [supply-chain](), [supply-chain-security](), [verify](), [wasi](), [wasm-components](), [wasmcloud](), [webassembly](), [webassembly-wasmcloud-security-cosign-oidc-signing-oci-registry-supply-chain-security-wasi-wasm-comp]() ### AI overview A tutorial showing how to build a Rust-based WebAssembly component, sign it with Sigstore Cosign using OIDC identity, push it to GitHub Container Registry, and verify it before execution. ### Source excerpt Build, sign, and verify WebAssembly component artifacts using Sigstore's cosign with OIDC identity--secure, registry-native signatures for wasmCloud. ## No CVEs, No Surprises: Chainguard and the UK Software Security Code of Practice DevFeed: [No CVEs, No Surprises: Chainguard and the UK Software Security Code of Practice]() Original publisher: [Read original article]() Published: 2025-06-09T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [Security](), [chainguard](), [chainguard containers](), [supply-chain-security](), [sdlc](), [Development](), [Cloud Native Ecosystem](), [Resilience](), [sigstore](), [Deployment]() Tags: [chainguard](), [chainguard-containers](), [compliance](), [cyber-resilience-act](), [emea](), [resilience](), [security](), [sigstore](), [slsa](), [software-development](), [software-supply-chain](), [sscop](), [ssdf](), [testing](), [uk](), [united-kingdom](), [zero-cves]() ### AI overview The article explains the United Kingdom's Software Security Code of Practice and maps its 14 principles across secure development, build integrity, deployment, and customer communication. It presents Chainguard Containers, provenance attestations, and signed SBOMs as ways Chainguard supports secure-by-default software and compliance efforts. ### Source excerpt Chainguard Containers support compliance with the United Kingdom's Software Security Code of Practice. Check out what the framework entails and how we help. ## Workload Identity Meets Supply Chain Security: Teleport's Sigstore Integration DevFeed: [Workload Identity Meets Supply Chain Security: Teleport's Sigstore Integration]() Original publisher: [Read original article]() Author: daniel.upton@goteleport.com (Dan Upton) Published: 2025-06-05T00:00:00Z Content type: tutorial Language: en Sources: [Teleport]() Topics: [sigstore](), [supply-chain-security](), [Security](), [OpenID connect (OIDC)](), [GitHub Actions]() Tags: [attestation](), [github-actions](), [oidc](), [provenance](), [security](), [signing](), [sigstore](), [supply-chain](), [supply-chain-security]() ### AI overview This article explains how Teleport integrates with Sigstore to strengthen software supply chain security for workload identity. It describes signing software artifacts and attestations, and explains Sigstore's keyless approach using single-use certificates tied to OIDC identities. ### Source excerpt Learn how to use Teleport's integration with Sigstore to build supply chain security into your workload identity. ## Chainguard's Catalog of 1,300+ Container Images: Secure Foundation for Every Engineering Team DevFeed: [Chainguard's Catalog of 1,300+ Container Images: Secure Foundation for Every Engineering Team]() Original publisher: [Read original article]() Published: 2025-05-12T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard containers](), [chainguard](), [Containers](), [chainguard os](), [container-security](), [Open Source](), [sigstore]() Tags: [chainguard](), [chainguard-catalog](), [chainguard-containers](), [chainguard-factory](), [chainguard-images](), [chainguard-os](), [container](), [container-images](), [cve-remediation](), [dependencies](), [open-source](), [provenance](), [safe-source-for-open-source](), [sigstore](), [slsa]() ### AI overview Chainguard describes its catalog of more than 1,300 minimal, zero-CVE container images, built from source on Chainguard OS and maintained through the Chainguard Factory. The article highlights daily rebuilds, automated dependency and CVE handling, and default SBOMs, SLSA provenance, and Sigstore signatures. ### Source excerpt Chainguard Containers is a catalog of over 1,300 container images powered by Chainguard OS and the Chainguard Factory. Discover the safe source for open source. ## Chainguard's Vision for a Safer Software Supply Chain DevFeed: [Chainguard's Vision for a Safer Software Supply Chain]() Original publisher: [Read original article]() Published: 2025-01-30T00:00:00Z Content type: opinion Language: en Sources: [Chainguard: Unchained]() Topics: [supply-chain-security](), [chainguard](), [Security](), [sigstore](), [Open Source]() Tags: [chainguard](), [chainguard-images](), [container-images](), [cve](), [integrity](), [open-source](), [security](), [signing](), [sigstore](), [software-development](), [software-supply-chain](), [supply-chain-attacks](), [supply-chain-integrity]() ### AI overview Chainguard presents its vision for secure software development, arguing that security and innovation should advance together. The article advocates signed binaries, verified dependencies, source-built container images, cryptographic build evidence, and broader adoption of supply-chain integrity standards such as Sigstore. ### Source excerpt Chainguard is building the future of secure software development, where security and innovation move in lockstep and every line of code makes software safer. ## Check out Chainguard at KubeCon NA in Salt Lake City on November 12-15! DevFeed: [Check out Chainguard at KubeCon NA in Salt Lake City on November 12-15!]() Original publisher: [Read original article]() Published: 2024-10-16T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard](), [chainguard images](), [container images](), [supply-chain-security](), [sigstore](), [distroless](), [CI/CD](), [Cloud](), [Security](), [devrel]() Tags: [chainguard](), [chainguard-images](), [ci-cd](), [cloud](), [cloud-native-rejekts](), [conference](), [container](), [debug](), [developers](), [devrel](), [devsecops](), [distroless](), [event](), [kubecon](), [kubernetes](), [multi-arch](), [sboms](), [security](), [sigstore](), [sigstorecon](), [slsa](), [software-supply-chain-security]() ### AI overview Chainguard announces its participation in KubeCon North America 2024 in Salt Lake City, including product demonstrations of Chainguard Images and appearances at Cloud-Native Rejekts and SigstoreCon. ### Source excerpt Chainguard is going to be at KubeCon North America 2024 in Salt Lake City. See where we'll be and how you can meet us to learn more about Chainguard Images. ## Chainguard announces new Sigstore Images to bring critical software supply chain tooling to enterprises DevFeed: [Chainguard announces new Sigstore Images to bring critical software supply chain tooling to enterprises]() Original publisher: [Read original article]() Published: 2023-11-14T00:00:00Z Content type: release Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard images](), [sigstore](), [supply-chain-security](), [chainguard]() Tags: [chainguard](), [chainguard-images](), [cve](), [helm-charts](), [image](), [on-prem](), [sigstore](), [software-supply-chain-security](), [vulnerability-management]() ### AI overview Chainguard launched a Sigstore bundle of 17 images for organizations that need to run a private, on-premises Sigstore stack. The bundle is compatible with official Helm charts and includes components such as Fulcio, Rekor, Trillian, CT Log, Redis, Cosign, and a Timestamp Authority. ### Source excerpt Revolutionize your enterprise's software supply chain with Chainguard's new Sigstore images. ## Securing the ML supply chain with new Chainguard AI Images DevFeed: [Securing the ML supply chain with new Chainguard AI Images]() Original publisher: [Read original article]() Published: 2023-08-24T00:00:00Z Content type: release Language: en Sources: [Chainguard: Unchained]() Topics: [supply-chain-security](), [chainguard images](), [Machine learning](), [chainguard](), [Kubernetes](), [sigstore]() Tags: [ai](), [chainguard](), [chainguard-ai](), [chainguard-images](), [conda-image](), [cve-remediation](), [kubeflow-image](), [ml-security](), [ml-supply-chain](), [open-ai-image](), [openai-image](), [python-image](), [sboms](), [secure-images](), [security](), [sigstore](), [software-signatures]() ### AI overview Chainguard announces a Chainguard Images AI bundle for securing the ML supply chain across the AI workload lifecycle. The collection includes development, workflow management, deployment, and vector database images, with software signatures, SBOMs, and CVE remediation. ### Source excerpt Chainguard AI Images: Your pathway to a secure ML supply chain with hardened, efficient AI/ML lifecycle solutions. ## Elastic partners with Chainguard on Software Supply Chain security and SLSA assessment DevFeed: [Elastic partners with Chainguard on Software Supply Chain security and SLSA assessment]() Original publisher: [Read original article]() Published: 2023-07-26T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [supply-chain-security](), [chainguard](), [Security](), [open-source-security](), [sigstore](), [Open Source]() Tags: [chainguard](), [open-source](), [open-source-software](), [security](), [sigstore](), [slsa](), [slsa-assessement](), [slsa-levels](), [software-artifact-signing](), [software-supply-chain](), [software-supply-chain-security](), [supply-chain](), [trust]() ### AI overview Elastic partnered with Chainguard to assess its software supply chain using the SLSA framework. The article describes supply-chain risks across source, build, dependencies, and packages, and highlights software artifact signing with Sigstore as a security measure. ### Source excerpt Elastic and Chainguard unite for enhanced software supply chain security and SLSA assessment. ## Introducing "Speranza": Enhancing software signing with privacy and usability DevFeed: [Introducing "Speranza": Enhancing software signing with privacy and usability]() Original publisher: [Read original article]() Published: 2023-05-30T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [supply-chain-security](), [Cryptography](), [open-source-security](), [sigstore](), [OpenID connect (OIDC)](), [npm]() Tags: [chainguard](), [chainguard-labs](), [cryptography](), [digital-signatures](), [oidc](), [open-source-security](), [pii](), [privacy](), [security](), [sigstore](), [software-artifact-signing](), [software-supply-chain](), [software-supply-chain-security](), [software-supply-chain-security-research](), [supply-chain]() ### AI overview Chainguard Labs introduces Speranza, a research project for usable, privacy-friendly software signing. The article explains how it aims to improve software supply chain security while addressing the usability problems of long-lived cryptographic keys and the privacy risks of exposing maintainers' identities or metadata. It also discusses potential applications in open source package repositories and enterprise deployments of Sigstore. ### Source excerpt Chainguard Labs announces, "Speranza: Usable, privacy-friendly software signing," to help balance usability and privacy for software signing techniques. ## Open source software takes center stage at RSA DevFeed: [Open source software takes center stage at RSA]() Original publisher: [Read original article]() Published: 2023-04-24T00:00:00Z Content type: opinion Language: en Sources: [Chainguard: Unchained]() Topics: [open-source-security](), [supply-chain-security](), [Open Source](), [npm](), [sigstore](), [Python](), [OpenID connect (OIDC)](), [Kubernetes]() Tags: [npm](), [oidc](), [open-source-software](), [open-source-software-security](), [openid-connect](), [python](), [security](), [sigstore](), [software-supply-chain](), [software-supply-chain-security]() ### AI overview The article examines why open-source software security became a major topic at the 2023 RSA Conference. It discusses software supply-chain risks, including the Log4j exploit, and highlights package provenance in npm, Sigstore-based signing and verification, and trusted publishers using OpenID Connect in PyPI. ### Source excerpt Open source software security takes center stage in the 2023 RSA Trends Report. Learn why it's a top concern. ## npm + Sigstore: Making Javascript secure by default DevFeed: [npm + Sigstore: Making Javascript secure by default]() Original publisher: [Read original article]() Published: 2023-04-19T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [npm](), [sigstore](), [JavaScript](), [Security](), [Package manager]() Tags: [javascript](), [npm](), [provenance](), [rekor](), [secure-by-default](), [signing](), [sigstore](), [software-supply-chain](), [verification]() ### AI overview npm announced a public beta for end-to-end signing of npm packages with Sigstore. The integration lets developers verify package build provenance and records signed attestations in the Rekor transparency log. ### Source excerpt npm launches Sigstore beta for end-to-end package signing, improving developer trust and security. ## Chainguard open sources new policy catalog for Sigstore policy-controller DevFeed: [Chainguard open sources new policy catalog for Sigstore policy-controller]() Original publisher: [Read original article]() Published: 2023-04-18T00:00:00Z Content type: release Language: en Sources: [Chainguard: Unchained]() Topics: [sigstore policy controller](), [sigstore](), [chainguard](), [supply-chain-security](), [Security](), [Kubernetes](), [rego](), [YAML]() Tags: [chainguard](), [kubernetes](), [kubernetes-security](), [rego](), [secure-software](), [security](), [sigstore](), [sigstore-policy-controller](), [supply-chain](), [supply-chain-security](), [trust](), [verification](), [yaml]() ### AI overview Chainguard open sources a policy catalog for Sigstore policy-controller. The catalog provides policies that organizations and open source projects can adopt incrementally to improve software supply-chain security, with community contributions supported. ### Source excerpt To help unlock benefits of the Sigstore policy-controller, Chainguard open sources a policy catalog that can be adopted to improve your supply chain security. ## Join Chainguard at KubeCon EU in Amsterdam April 19-21! DevFeed: [Join Chainguard at KubeCon EU in Amsterdam April 19-21!]() Original publisher: [Read original article]() Published: 2023-04-13T00:00:00Z Content type: news Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard](), [Kubernetes](), [supply-chain-security](), [chainguard images](), [chainguard enforce](), [sigstore](), [SPIRE](), [eBPF](), [observability](), [Open Source]() Tags: [chainguard](), [chainguard-enforce](), [chainguard-images](), [cloud-native](), [cncf](), [cves](), [ebpf](), [kubecon](), [kubecon-eu](), [kubernetes](), [linux-foundation](), [observability](), [open-source](), [security](), [sigstore](), [spire](), [supply-chain]() ### AI overview Chainguard announces its participation in KubeCon EU 2023 in Amsterdam, including booth demonstrations of the Chainguard platform and Chainguard Images. The article highlights comparisons of minimal container image size and CVE counts, Chainguard Enforce visibility into deployed software and dependencies, and conference sessions on CI/CD security on Kubernetes, SLSA, Tekton, Sigstore, SPIRE, and Falco. ### Source excerpt Join Chainguard at KubeCon EU in Amsterdam, April 19-21, for groundbreaking insights into cloud-native technologies. ## It all started with a commit: Celebrating 6 years of Distroless DevFeed: [It all started with a commit: Celebrating 6 years of Distroless]() Original publisher: [Read original article]() Published: 2023-04-12T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [distroless](), [Containers](), [supply-chain-security](), [container images](), [sigstore](), [chainguard images](), [Kubernetes](), [vulnerability](), [bazel](), [Debian](), [vulnerability management](), [Go]() Tags: [bazel](), [c-plus-plus](), [chainguard](), [chainguard-images](), [containers](), [debian](), [digital-signatures](), [distroless](), [distroless-containers](), [go](), [java](), [kubernetes](), [python](), [release-engineering](), [sigstore](), [software-supply-chain-security](), [verify](), [vulnerability](), [vulnerability-management]() ### AI overview The article commemorates six years of Distroless, describing its goal of creating more secure and efficient container images by removing non-essential components. It covers the Bazel-based build tooling, language runtimes, Kubernetes adoption, vulnerability-management benefits, and later integration with Sigstore for container signing and authenticity verification. It also introduces the subsequent development of Chainguard Images. ### Source excerpt The goal of Distroless is to provide a more secure and efficient way to package and run software in containers by using only essential components. ## ICYMI: What's new in Chainguard Academy DevFeed: [ICYMI: What's new in Chainguard Academy]() Original publisher: [Read original article]() Published: 2023-04-03T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard](), [open-source-security](), [supply-chain-security](), [chainguard images](), [openvex](), [sigstore](), [Kubernetes]() Tags: [chainguard](), [chainguard-academy](), [chainguard-enforce](), [chainguard-images](), [kubernetes](), [open-source-security](), [openvex](), [sbom](), [sboms](), [sigstore](), [sigstore-policy-controller](), [software-education](), [software-security-practices](), [software-supply-chain](), [supply-chain](), [wolfi]() ### AI overview Chainguard Academy has expanded to more than 300 tutorials, documentation pages, and reference materials covering open source projects and Chainguard products. The article highlights resources for Chainguard Images and Wolfi Images, OpenVEX, SBOMs, and Sigstore policy-controller. ### Source excerpt See what's new in Chainguard Academy to help you level up your software supply chain and open source security knowledge. ## New Chainguard Academy tutorial: Cosign the manual way DevFeed: [New Chainguard Academy tutorial: Cosign the manual way]() Original publisher: [Read original article]() Published: 2023-03-30T00:00:00Z Content type: tutorial Language: en Sources: [Chainguard: Unchained]() Topics: [Tutorial](), [sigstore](), [Security](), [supply-chain-security](), [Command-line interface](), [Software]() Tags: [algorithm](), [chainguard](), [chainguard-academy](), [cli](), [cosign](), [rekor](), [rsa](), [security](), [sha-256](), [signing](), [sigstore](), [software-artifact-signing](), [transparency-log](), [trust](), [tutorial](), [verify]() ### AI overview This article introduces a Chainguard Academy tutorial that explains Cosign's blob-signing capabilities. It covers generating an RSA key pair, signing data with SHA-256, uploading signatures to the Rekor transparency log, and verifying the signature. ### Source excerpt New Chainguard Academy tutorial unpacks Cosign the manual way and explores Cosign's blob signing capabilities. ## SBOMs in a multi-architecture world DevFeed: [SBOMs in a multi-architecture world]() Original publisher: [Read original article]() Published: 2023-02-22T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [container images](), [chainguard](), [sigstore](), [Cloud]() Tags: [architecture](), [chainguard](), [chainguard-enforce](), [chainguard-images](), [container-images](), [sbom](), [sboms](), [sigstore]() ### AI overview This article explains how Chainguard handles SBOMs for multi-architecture container images. Each architecture-specific image carries its own standalone SBOM, while the image index avoids duplicating variant information and instead references the constituent metadata. ### Source excerpt As the world becomes more architecturally diverse, we at Chainguard want to make sure our users are armed with the tools they need to remain secure. ## Chainguard named an IDC Innovator for open source software supply chain security DevFeed: [Chainguard named an IDC Innovator for open source software supply chain security]() Original publisher: [Read original article]() Published: 2023-02-15T00:00:00Z Content type: news Language: en Sources: [Chainguard: Unchained]() Topics: [supply-chain-security](), [chainguard](), [open-source-security](), [idc](), [chainguard enforce](), [chainguard images](), [DevSecOps](), [sigstore](), [DevOps]() Tags: [chainguard](), [chainguard-enforce](), [chainguard-images](), [devsecops](), [idc-innovators](), [open-source-security](), [open-source-software](), [sigstore](), [slsa](), [software-supply-chain](), [software-supply-chain-security]() ### AI overview Chainguard was named an IDC Innovator in a 2023 report on open source software supply chain security. The article describes Chainguard's developer platform, including Chainguard Images and Chainguard Enforce, and its use of SLSA and Sigstore to integrate security checkpoints throughout the software development lifecycle. ### Source excerpt The IDC Innovators report profiles Chainguard as one of three companies offering enhanced capabilities for open source software supply chain management. ## Not all that's signed is secure: Verify the right way with TUF and Sigstore DevFeed: [Not all that's signed is secure: Verify the right way with TUF and Sigstore]() Original publisher: [Read original article]() Published: 2023-02-08T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [sigstore](), [supply-chain-security](), [Open Source](), [chainguard](), [chainguard enforce]() Tags: [chainguard-enforce](), [open-source](), [policy](), [secure-software](), [signing](), [sigstore](), [software-signatures](), [software-supply-chain](), [supply-chain-attacks](), [verification]() ### AI overview The article summarizes a talk on using Sigstore and The Update Framework (TUF) to create verification policies for securing software supply chains. It explains that signing alone does not provide sufficient protection, because verifying the wrong way can leave systems vulnerable to supply chain attacks. It presents TUF as a way to build flexible verification policies and describes how Sigstore supports easier signing with rigorous verification. ### Source excerpt CloudNativeSecurityCon: Marina Moore & Zack Newman on using Sigstore & The Update Framework TUF to create verification policies to secure software supply chains ## Chainguard Image now available for Kubectl DevFeed: [Chainguard Image now available for Kubectl]() Original publisher: [Read original article]() Published: 2023-02-07T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard](), [chainguard images](), [Security](), [sigstore](), [vulnerability scanning](), [Cloud Native Ecosystem](), [Containers](), [ci](), [GitOps]() Tags: [base-images](), [chainguard](), [chainguard-images](), [ci](), [containers](), [gitops](), [kubectl](), [kubernetes](), [sbom](), [security](), [sigstore](), [slsa](), [vulnerability-scanning]() ### AI overview Chainguard announces a kubectl image in the Chainguard Images catalog. The image supports multiple architectures, including arm64, is 75% smaller than a commonly used alternative, includes SBOMs, and is signed with Sigstore. Chainguard reports zero known CVEs at publication time. ### Source excerpt Kubectl added to Chainguard Images catalog. Chainguard kubectl build is 75% smaller than the usual image used & is the only supported image with arm64 support. ## GoReleaser v1 -- one year later DevFeed: [GoReleaser v1 -- one year later]() Original publisher: [Read original article]() Author: Carlos Alexandro Becker Published: 2022-11-14T00:00:00Z Content type: article Language: en Sources: [Carlos Becker]() Topics: [releases](), [GitHub](), [Maintainers](), [Security](), [sigstore](), [anchore](), [openssf]() Tags: [anchore](), [github](), [maintainers](), [openssf](), [release](), [releases](), [security](), [sigstore]() ### AI overview A retrospective on GoReleaser's first year after version 1.0.0, covering its development activity, release cadence, community growth, new features, bug fixes, integrations, and progress on security and supply-chain practices. ### Source excerpt We launched GoReleaser v1 exactly 1 year ago today!