Kubernetes taps Sigstore to thwart open-source software supply chain attacks

Kubernetes will now include cryptographically signed certificates, using the Sigstore project created last year by the Linux Foundation, Google, Red Hat, and Purdue University in a bid to protect against supply chain attacks.