TestifySec

[TestifySec @testifysec]

As a seasoned Go developer our CTO, Mikhail Swift, recently explored the transformative impact of the much-awaited generics feature in Go 1.18 through a compelling use case within our Witness project. See what he learned in the full blog post: https://t.co/J8Y9aMylhB

[TestifySec @testifysec]

Make sure to head over and star it today to ensure you stay updated with project updates and information. We have room for more "relationships". 😉

Join the #witness community - https://t.co/yXc5MxK2Id

#supplychain #cybersecurity #repo #github

[TestifySec @testifysec]

At TestifySec, we're passionate about #softwaresecurity and #supplychainsecurity. But we're also passionate about our families. As the holiday season approaches, remember to prioritize the people who matter most. #familytime

[developer-guy @developerguyba]

Great blog post by @colek42c published on @testifysec website about comparing #intoto and @projectsigstore; you will find very niche details about them; don't forget to read it 👇
https://t.co/XUMfAAR0iR

[TestifySec @testifysec]

Introducing Archivista, a server-side app that helps businesses securely manage their software supply chain data. Protect your supply chain and make confident, informed decisions. Visit our website or contact us to schedule a demo.

https://t.co/VLiXP8hUSf

[TestifySec @testifysec]

In the land of TestifySec,
Our products do protect,
Witness and Archivista,
Together a perfect pair,
To help secure your software,
From source to production fair,
And Judge to enforce the rules,
With policies that we can share,
So come and try our tools,
And join us in our quest

[TestifySec @testifysec]

At @TestifySec we know that getting compromised can seriously affect organizations. That's why we're dedicated to securing the software supply chain and ensuring the integrity of the software being developed. Don't let your software become a vulnerability - trust TestifySec.

[TestifySec @testifysec]

There needs to be more clarity in the Software Supply Chain Security space

In our latest blog article, We talk about the differences between in-toto and @projectsigstore, and when it is appropriate to use each.

https://t.co/Hk2FwM5h3D

[Cole Kennedy @colek42c]

In-toto vs. sigstore: what are they and how do they differ? 🧵 👇 @projectsigstore @torresariass #intoto

[Cole Kennedy @colek42c]

Amazing.

[Aditya Sirish @adityasaky]

You can now generate in-toto metadata via a GitHub action, thanks to @colek42c's work at @KubeCon_'s in-toto + TUF + @projectsigstore ContribFest! https://t.co/FcgQozh8sF

[Tracy Miranda @tracymiranda]

Petition to start calling these GUESSBOMs! 💣💣💣

[Cole Kennedy @colek42c]

We just landed initial @witness_dev support for @github.

This uses a preview build of Witness with #Archivist support.

A GitHub attestor, and Keyless signing should drop before Kubecon. Let me know if you give it a whirl.

https://t.co/VggUp3Bue7

[Cole Kennedy @colek42c]

Have you ever wondered how to inventory all the dependencies in a software build?

In this talk, I will showcase how end users can create and use #BPF traces to minimize #CVE false positives and negatives with @witness_dev and @ciliumproject #tetragon

https://t.co/f1PiQqgeJ1

[TestifySec @testifysec]

We are working on making supply chain security and compliance easy. Learn more at https://t.co/P6VlszomoK @witness_dev

[Cole Kennedy @colek42c]

preview of our backend for @witness_dev. Amazing work by @mikhailswift/@ffkiv

[Cole Kennedy @colek42c]

We had a user post an issue that hit an edge case we didn't test for. Our team fixed the issue the next business day, along with unit and integration tests. I couldn't be more proud of our engineering team led by @mikhailswift

[Cole Kennedy @colek42c]

I started adding support for the SPIRE delegated identity API to @witness_dev today. This lets us sign attestations based on the shasum of the CI command being run. Great work on this powerful API @SPIFFEio team!

[Cole Kennedy @colek42c]

We use @SPIFFEio as a way to distribute trust, using remote attestation in our Judge platform. However, we don't expect our users to understand Spire, and spire registrations. We are making great progress on federating SPIRE and making registration easy.
https://t.co/XbM7JW1OFy