corpus.blog
41554 blogs · 4,417,066 posts Claim your blog
Record · corpus.blog/posts/01a0bde6-ae9a-7210-bca2-dfc971ecbdd7

Catching Malicious Package Releases Using a Transparency Log

OpenSSF Blog · published 19 December 2025

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at openssf.org Wayback capture
0blogs citing
First cited
—
Most recent
—
Rank this month
not ranked
Links from this post
15
Words captured
1,159

Cited by

No blog we hold has cited this post yet.

Links from this post

Link
Host
https://blog.trailofbits.com/2025/12/12/catching-malicious-package-releases-using-a-transparency-log/
blog.trailofbits.com
https://github.com/sigstore/rekor-monitor
github.com
https://docs.sigstore.dev/logging/overview/
docs.sigstore.dev
https://openssf.org/
openssf.org
Rekor v2 GA - Cheaper to run, simpler to maintain Read at the source ↗
blog.sigstore.dev
https://docs.pypi.org/attestations/producing-attestations/
docs.pypi.org
https://docs.npmjs.com/generating-provenance-statements
docs.npmjs.com
https://go.dev/ref/mod
go.dev
https://research.swtch.com/tlog
research.swtch.com
https://blog.trailofbits.com/2024/11/14/attestations-a-new-generation-of-signatures-on-pypi/
blog.trailofbits.com
https://search.sigstore.dev/?logIndex=243090039
search.sigstore.dev
https://docs.pypi.org/trusted-publishers/
docs.pypi.org
https://theupdateframework.io/
theupdateframework.io
https://github.com/sigstore/rekor-monitor?tab=readme-ov-file
github.com
https://www.gopherwatch.org/
gopherwatch.org