HNHacker News
TopNewBestAskShowJobs

colek42

482 karma · joined October 21, 2015

Founder of pushgate.dev, and maintainer of Witness and Archivista

github.com/in-toto/witness github.com/in-toto/archivista

cole at testifysec.com

submissionscomments

Show HN: CI/Lock – signed evidence of what your CI ran

cilock.dev·1 pts·colek42·
0

Show HN: CI/lock – supply-chain attestation CLI, from the Witness creators

cilock.dev·1 pts·colek42·
0

Anthropic vs. DoD: "Any lawful use" is a fight about control

2 pts·colek42·
8

Shifting 'Shift Left' and What We Can Learn from Uber

productgovernance.substack.com·2 pts·colek42·
0

Shifting 'Shift Left' and What We Can Learn from Uber

productgovernance.substack.com·1 pts·colek42·
0

How to Shift Compliance Left – A Letter to Developers

productgovernance.substack.com·3 pts·colek42·
0

Shifting Compliance Left – A Letter to Compliance Teams

productgovernance.substack.com·2 pts·colek42·
0

Building an Effective Enterprise Software Supply Chain Policy

testifysec.com·1 pts·colek42·
0

Witness is a pluggable framework digital attestation

github.com·3 pts·colek42·
1

Keyless Signing of Digital Attestations with Witness and SigStore

testifysec.com·1 pts·colek42·
0

Keyless Signing with Witness and SigStore

testifysec.com·9 pts·colek42·
0

Comparing In-Toto and Sigstore: Two Approaches to Software Supply Chain Security

testifysec.com·1 pts·colek42·
0

2019 – USENIX – in-toto: Providing farm-to-table guarantees for bits and bytes

youtube.com·1 pts·colek42·
0

Automating Compliance – Why the SBOM Falls Short

testifysec.com·1 pts·colek42·
0

What Is a Software Supply Chain Attestation?

testifysec.com·2 pts·colek42·
0

Fpx: Easy USB‑C power for all your devices

fpx.oxplot.com·33 pts·colek42·
4

What Is the SSDF – and What Does It Mean for My Software Supply Chain Compliance

testifysec.com·2 pts·colek42·
0

What Is a Software Supply Chain Attestation

testifysec.com·2 pts·colek42·
0

Tool that emulates the SolarWinds CI compromise attack vector

github.com·1 pts·colek42·
0

What is an SBOM, and why should you care?

boxboat.com·2 pts·colek42·
0

Next week might as well be SBOM Week

tomalrichblog.blogspot.com·1 pts·colek42·
0

Supply Chain Security By Verification – Mitigating root credential loss

boxboat.com·1 pts·colek42·
0

Safeguarding the World from the SolarWinds Hack and Future Supply Chain Attacks

boxboat.com·1 pts·colek42·
0

Safeguarding the World from Solarburst and Future Supply Chain Attacks

boxboat.com·1 pts·colek42·
0

Employers views on remote work - a survey

boxboat.com·8 pts·colek42·
0

Open Source Electronics Lab for $30

github.com·417 pts·colek42·
76

Historian uses lasers to unlock mysteries of Notre Dame Cathedral

news.nationalgeographic.com·1 pts·colek42·
0

Ebates requires full access to Gmail for SSO

twitter.com·11 pts·colek42·
1

Building containers with Kubernetes

boxboat.com·3 pts·colek42·
0

Atlantic tropical forecast discussions and data

tropicaltidbits.com·2 pts·colek42·
0
Page 1 of 2Next →