SigstoreCon Supply Chain Day was a one-day, vendor-neutral conference held on November 12, 2024, in Salt Lake City, Utah. The event has passed; the published materials describe a program focused on signing and verifying software artifacts with Sigstore and on related software supply-chain security work.
What was SigstoreCon Supply Chain Day?
SigstoreCon Supply Chain Day was organized around “simplifying signing and verification for digital artifacts.” Its goal was to help attendees understand how Sigstore and related efforts can support software supply-chain security. The event announcement described it as vendor-neutral, rather than a conference centered on one company’s products. Sigstore’s August 14, 2024 announcement and the Linux Foundation event page provide the historical details.
As an Amazon Associate I earn from qualifying purchases.
When and where was the event?
The conference took place on November 12, 2024, in Salt Lake City, Utah. The Linux Foundation marks the event as passed, and the materials cited here do not announce a later edition.
What topics did the conference cover?
Sigstore was the technical center, but the program scope extended to projects and practices that address other parts of software supply-chain security:
#1 Best Overall
- Signing and verification: using Sigstore to establish and check the integrity and origin of digital artifacts.
- Related initiatives: SLSA, The Update Framework (TUF), and in-toto.
- Supply-chain records: software bills of materials (SBOMs) and transparency logs, including binary transparency.
- Adoption and implementation: package-registry integration, client development, and case studies from organizations adopting these approaches.
- Research and practice: transparency, privacy-preserving identities, and best practices in supply-chain security.
These were subjects identified in the announcement and CFP, not a set of competing tools or approaches ranked by the event.
Who was the event for, and what formats were planned?
The Linux Foundation named open-source contributors, maintainers, and industry professionals as its intended audience. The CFP called for 30-minute session presentations and 10-minute lightning talks, with proposals expected to avoid sales or marketing pitches.
What did registration and the CFP involve?
The following are historical details for the 2024 event only; registration and proposal deadlines have passed.
Free tools Windows power users keep installed
One-click scans. No signup required.
- Registration: Sigstore’s announcement listed a $50 fee, including lunch, coffee, and swag. It said attendees needed to register for SigstoreCon but did not also need to register for KubeCon.
- Proposal deadline: September 18, 2024.
- Speaker notifications: October 2, 2024.
- Schedule announcement: October 3, 2024.
- Slides deadline: November 8, 2024; accepted speakers were required to submit slides before the event.
What can the event materials establish?
The event pages establish its date, location, intended audience, planned formats, and subject areas. They do not provide an attendance count, measured adoption outcomes, or an assessment of the event’s impact, so those results cannot be inferred from the published logistics.
For historical context, Sigstore’s September 14, 2022 program announcement described an earlier SigstoreCon with talks on keyless signing, trust roots, certificate authorities, ecosystem integrations, and real-world adoption. That earlier program is context for the community’s history; it does not establish sponsors or commercial relationships for the 2024 event.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
