Chainloop

40+ minutes of pure knowledge! Learn how to secure your software supply chain with insights from Keyfactor's Sven Rajala & Ben Dewberry and Chainloop’s Miguel Martinez Trivino & José Ignacio París Prieto

oh hey! Chainloop appeared in last week's Kubecon NA Keynote. Thanks, Santiago Torres Arias, for the shoutout and the work you've done to take the in-toto framework and community from inception to where it is now 🙌 https://lnkd.in/djbWQ6ZV

We are coming back with a bag full of ideas and feedback. Again, thanks to our design partners and users for helping us shape the future of Software Supply Chain automated compliance.

We have a bag full of ideas and new features from which to get your feedback. See you at Kubecon NA in Salt Lake City!

🚀 We're getting there! Own your Software Supply Chain with Chainloop 🚀 - Escrow all your artifacts, evidence, and metadata. - Centralize all your policies, compliance, and security dashboards. - Automate compliance and security.

🚀 Chainloop Changelog - October 2024 🚀 This month, we've expanded our policy library, transforming Chainloop into a central DevSecOps engine —not just for SBOMs and CVEs anymore. New policies address compliance requirements like SBOM NTIA compliance and support secrets detection through GitLab secret scan reports. We've also added policies compatible with the 2023 CWE Top 25, working seamlessly with tools like SpotBugs, Zap, KICS, Blackduck, and GitLab, as well as policies for Infrastructure as Code (IaC) misconfiguration. To make policy management easier, we've improved the user experience by allowing you to create policy groups, add custom policies, and manage versioned policies. This gives you control over change management for your compliance and governance processes, ensuring you can update policies confidently without worrying about system disruptions. Finally, we're excited to announce that Chainloop will be at KubeCon North America and BackstageCon in Salt Lake City in just under two weeks! 

One of Chainloop's core principles is to meet our users where they are, and Keyfactor's solutions (both open-source and enterprise versions) are a common theme when talking to our users. That's why we are very excited about this partnership and integrations. Read more about making automated software supply chain compliance and governance decisions using metadata that you can trust, enabled by #signserver, #ejbca, #intoto, and more in our joint Cloud Native Computing Foundation (CNCF) blog post.

Chainloop will be at #kubeconNA and BackstageCon in Salt Lake City in less than a month! We'll bring a bag full of demos, from showing the PKI integrations we've done with our friends at Keyfactor, managing Software Delivery compliance at scale with policies, to some cool developer portal integrations with #backstage. Let's chat! https://lnkd.in/dygDP_Cj

Chainloop was named the "Startup of the Year" at the #Cyber24Day conference organized by CyberDefence24.pl

🚀 You asked, and we delivered 🚀 - Use Your PKI thanks to our partnership with Keyfactor and integration with EJBCA and SignServer. - Improved Policy Library: Build SBOM quality control gates and apply the same policies across CycloneDX, CSAF, or SARIF files. Analyze vulnerabilities for reports generated with Trivy, Grype, and Twistlock, or check for CWEs from the 2023 CWE Top 25 list. - SOC 2 Type II compliance, Windows support, and improvements to our Dagger module. Check out our latest Chainloop Changelog blog post: https://lnkd.in/dkYSFc7g