Logo
Picture

TestifySec @testifysec

Joined July 2021
  • Tweets
    73
  • Followers
    139
  • Following
    39
  • Likes
    81
testifysec Profile Picture

TestifySec @testifysec

3 years ago

As a seasoned Go developer our CTO, Mikhail Swift, recently explored the transformative impact of the much-awaited generics feature in Go 1.18 through a compelling use case within our Witness project. See what he learned in the full blog post: buff.ly/3S5BvmM

testifysec Profile Picture

TestifySec @testifysec

3 years ago

Make sure to head over and star it today to ensure you stay updated with project updates and information. We have room for more "relationships". 😉 Join the #witness community - buff.ly/3JFu7tG #supplychain #cybersecurity #repo #github

testifysec Profile Picture

TestifySec @testifysec

4 years ago

At TestifySec, we're passionate about #softwaresecurity and #supplychainsecurity. But we're also passionate about our families. As the holiday season approaches, remember to prioritize the people who matter most. #familytime

TestifySec retweeted
developerguyba Profile Picture

developer-guy @developerguyba

4 years ago

Great blog post by @colek42c published on @testifysec website about comparing #intoto and @projectsigstore; you will find very niche details about them; don't forget to read it 👇 testifysec.com/blog/sigstore-…

testifysec Profile Picture

TestifySec @testifysec

4 years ago

Introducing Archivista, a server-side app that helps businesses securely manage their software supply chain data. Protect your supply chain and make confident, informed decisions. Visit our website or contact us to schedule a demo. testifysec.com/blog/secure-su…

testifysec Profile Picture

TestifySec @testifysec

4 years ago

In the land of TestifySec, Our products do protect, Witness and Archivista, Together a perfect pair, To help secure your software, From source to production fair, And Judge to enforce the rules, With policies that we can share, So come and try our tools, And join us in our quest

testifysec Profile Picture

TestifySec @testifysec

4 years ago

At @TestifySec we know that getting compromised can seriously affect organizations. That's why we're dedicated to securing the software supply chain and ensuring the integrity of the software being developed. Don't let your software become a vulnerability - trust TestifySec.

testifysec Profile Picture

TestifySec @testifysec

4 years ago

There needs to be more clarity in the Software Supply Chain Security space In our latest blog article, We talk about the differences between in-toto and @projectsigstore, and when it is appropriate to use each. testifysec.com/blog/sigstore-…

TestifySec retweeted
colek42c Profile Picture

Cole Kennedy @colek42c

4 years ago

In-toto vs. sigstore: what are they and how do they differ? 🧵 👇 @projectsigstore @torresariass #intoto

TestifySec retweeted
colek42c Profile Picture

Cole Kennedy @colek42c

4 years ago

Amazing.

TestifySec retweeted
adityasaky Profile Picture

Aditya Sirish @adityasaky

4 years ago

You can now generate in-toto metadata via a GitHub action, thanks to @colek42c's work at @KubeCon_'s in-toto + TUF + @projectsigstore ContribFest! github.com/marketplace/ac…

TestifySec retweeted
tracymiranda Profile Picture

Tracy Miranda @tracymiranda

4 years ago

Petition to start calling these GUESSBOMs! 💣💣💣

tracymiranda Profile Picture

Tracy Miranda @tracymiranda

4 years ago

One under-appreciated problem with software bill-of-materials (SBOM) is that SBOMs that are recreated after build time - e.g. by software composition analysis [SCA] tools - are typically incomplete and have to make a best guess of the 'ingredients' of the software artifacts.

TestifySec retweeted
colek42c Profile Picture

Cole Kennedy @colek42c

4 years ago

We just landed initial @witness_dev support for @github. This uses a preview build of Witness with #Archivist support. A GitHub attestor, and Keyless signing should drop before Kubecon. Let me know if you give it a whirl. github.com/testifysec/wit…

TestifySec retweeted
colek42c Profile Picture

Cole Kennedy @colek42c

4 years ago

Have you ever wondered how to inventory all the dependencies in a software build? In this talk, I will showcase how end users can create and use #BPF traces to minimize #CVE false positives and negatives with @witness_dev and @ciliumproject #tetragon sched.co/1AOie

testifysec Profile Picture

TestifySec @testifysec

4 years ago

We are working on making supply chain security and compliance easy. Learn more at witness.dev @witness_dev

TestifySec retweeted
colek42c Profile Picture

Cole Kennedy @colek42c

4 years ago

preview of our backend for @witness_dev. Amazing work by @mikhailswift/@ffkiv

TestifySec retweeted
colek42c Profile Picture

Cole Kennedy @colek42c

4 years ago

We had a user post an issue that hit an edge case we didn't test for. Our team fixed the issue the next business day, along with unit and integration tests. I couldn't be more proud of our engineering team led by @mikhailswift

TestifySec retweeted
colek42c Profile Picture

Cole Kennedy @colek42c

4 years ago

I started adding support for the SPIRE delegated identity API to @witness_dev today. This lets us sign attestations based on the shasum of the CI command being run. Great work on this powerful API @SPIFFEio team!

TestifySec retweeted
colek42c Profile Picture

Cole Kennedy @colek42c

4 years ago

We use @SPIFFEio as a way to distribute trust, using remote attestation in our Judge platform. However, we don't expect our users to understand Spire, and spire registrations. We are making great progress on federating SPIRE and making registration easy. asciinema.org/a/ieVRO9nQ3AZx…

Trends for United States

Harper
Dylan Lee
Phillies
Andrew Painter
Hunter Brown
Braves
Reggie
Alec Bohm
Walt
Dom Smith
Gemini 4 Argon
Portugal
Astros
Newt Gingrich
Ronaldo
Wheeler
Project Meridian
Michael Harris
Sanchez
Suarez

You might like

Syft is an open source tool to generate a Software Bill of Materials (SBOM) from a container image or filesystem. Created and maintained by @Anchore.
Syft
@SyftProject
1K Followers
Grype is an open source vulnerability scanner for Software Bills of Material (SBOMs), containers, and filesystems. Created and maintained by @Anchore.
Grype
@GrypeProject
1K Followers
CEO of @nolabshq - Creator of https://t.co/T8htHI6XS3 , now building https://t.co/OBABqFv9Ou - the agent security platform.
Luke Hinds
@decodebytes
3K Followers
💼 Director of Security 📬 @CloudSecList 📚 https://t.co/TrQKzxfnYg 💬 I write about security strategy, technical leadership, and cloud security.
Marco Lancini
@lancinimarco
7K Followers
The @github Security team. 🚨 Report vulnerability: https://t.co/wTLhTm60PQ. Security Research: @GHSecurityLab. We're hiring!
GitHub Security
@GitHubSecurity
16K Followers
A better way to ship. Test any codebase end-to-end, repeatably and at scale. Runs locally, in your CI server, or directly in the cloud.
Dagger
@dagger_io
7K Followers
Open Source Security Foundation (OpenSSF) Together, we're securing the #opensource ecosystem #OSSSecurity https://t.co/uUpbn44G4Q https://t.co/adjLU8dbk0
OpenSSF
@openssf
6K Followers
OSS Supply Chain Security @google. @projectsigstore @theopenssf Technical Advisory Council - Ex-Red Hat, NetApp, IBM. PhD ECE NCSU.
Bob Callaway
@rdcallaw
693 Followers
Founder/CTO of @chainguard_dev.
Matt Moore ⛓🚀
@mattomata
3K Followers