GitHub Releases Artifact Attestations
June 27, 2024

GitHub announced the general availability of GitHub Artifact Attestations.

Powered by Sigstore, Artifact Attestations allow developers to guarantee the integrity of artifacts built inside GitHub Actions by creating and verifying signed attestations. With this release, users can now easily verify these artifacts before they deploy them in your Kubernetes cluster.

By integrating Artifact Attestations into their GitHub Actions workflows, developers can enhance their security and protect against supply chain attacks and unauthorized modifications.

The update also includes the Kubernetes Policy Controller, allowing developers to validate attestations directly within Kubernetes clusters as an added layer of security. With over 100M developers building on GitHub, this update further secures the software supply chain by reducing project's potential exposure to threats.

Share this

Industry News

June 27, 2024

Backslash Security unveiled expansive new platform capabilities. With a broad roster of new on-premises integrations, security team workflow integrations and automation features, CI/CD integrations, and bolstered language support, Backslash now serves the full software development lifecycle and further supports the application security needs of large enterprises.

June 27, 2024

Progress received numerous accolades from prestigious organizations for its employee satisfaction, executive leadership, inclusive workplace and commitment to corporate social responsibility.

June 27, 2024

GitHub announced the general availability of GitHub Artifact Attestations.

June 26, 2024

Datadog announced Datadog Kubernetes Autoscaling, a set of capabilities that intelligently automates resource optimization and can automatically scale customers’ Kubernetes environments based on real-time and historical utilization metrics.

June 26, 2024

AppMap announced the launch and general availability of Navie, a runtime aware AI-powered coder.

June 26, 2024

ReversingLabs introduced Spectra Assure Community, a free community resource that makes it easy for software producers to quickly vet open source software packages by providing a comprehensive risk analysis.

June 26, 2024

Kovair Software has joined the Boomi Technology Partner Program, bringing managed DevOps-as-a-Service to the Boomi Enterprise Platform.

June 26, 2024

OutSystems announced its collaboration with KPMG in Canada, a premier provider of professional services.

June 25, 2024

JFrog has entered into a definitive agreement to acquire Qwak AI Ltd., creator of an AI and MLOps platform.

June 25, 2024

OutSystems announced that OutSystems Developer Cloud (ODC) has achieved SOC 2 attestation, a requirement of organizations deploying mission-critical systems and applications that manage sensitive personal data.

June 25, 2024

Bitwarden announced public beta availability for integrating Bitwarden Secrets Manager into Kubernetes workflows for developers and DevOps teams.

June 25, 2024

GitLab achieved “In Process” designation at the Moderate impact level from the Federal Risk and Authorization Management Program (FedRAMP).

June 24, 2024

Grid Dynamics announced its AI for Developer Productivity Toolkit.

June 24, 2024

Multiplayer, a collaborative developer platform for teams who work on distributed software, officially announced its General Availability.

June 24, 2024

DataStax announced major updates to its Generative AI development platform that help make retrieval augmented generation (RAG) powered application development 100X faster.