Gitsign - Keyless Git Commit Signing

Gitsign - Keyless Git Commit Signing

Explore keyless Git commit signing with Gitsign in this 37-minute conference talk by Billy Lynch from Chainguard Inc. Learn how Gitsign, one of Sigstore's latest projects, brings "keyless" signing to Git and improves software supply chain security. Dive into the inner workings of Gitsign, its integration with the Sigstore ecosystem, and discover how to apply it to development, CI/CD, and GitOps workflows. Understand the importance of signing every step in the release pipeline, from artifacts to source code, and how tools like Gitsign complement existing solutions such as cosign for container signing.