The Tool Desk
Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →SigstoreCon Supply Chain Day was a one-day, vendor-neutral conference held on November 12, 2024, in Salt Lake City, Utah. It focused on signing and verifying software artifacts with Sigstore and related approaches to software supply-chain security. The event has passed; the cited materials do not announce a later edition.
What was SigstoreCon Supply Chain Day?
SigstoreCon Supply Chain Day brought together people interested in making software artifacts easier to sign and verify. The organizer described its aim as “simplifying signing and verification for digital artifacts,” with discussion extending to other projects and practices that help secure software supply chains. Sigstore’s August 14, 2024 announcement called it a vendor-neutral event.
The Linux Foundation listed open-source contributors, maintainers, and industry professionals as its intended audience. The planned program formats were 30-minute sessions and 10-minute lightning talks. The Linux Foundation CFP page also asked speakers to avoid sales and marketing pitches.
What topics did the conference cover?
Sigstore was the technical center, but the announced scope was broader than a single signing tool. The materials connected artifact signing and verification with related standards, projects, and practices:
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
#1 Best Overall
- Sigstore: signing and verifying digital artifacts.
- SLSA and The Update Framework (TUF): adjacent software supply-chain security efforts named in the event announcement.
- in-toto, SBOMs, and transparency logs: additional subjects listed in the CFP.
- Adoption and implementation: case studies, package-registry adoption, and client development.
- Research and practice: transparency, privacy-preserving identities, and supply-chain security best practices.
These were proposed subject areas, not a published evaluation ranking the projects or approaches against one another. The event materials do not establish attendance totals or measured adoption outcomes.
When and where was it held?
The conference took place November 12, 2024, in Salt Lake City, Utah. The Linux Foundation event page marks it as passed. Its registration details are historical: Sigstore’s 2024 announcement listed a $50 fee that included lunch, coffee, and swag. It also said that attendees needed to register for SigstoreCon, but did not need to register for KubeCon as well. Those details describe the 2024 event only and are not current registration options.
What were the 2024 speaker-submission dates?
The CFP listed this schedule for the 2024 event:
- September 18, 2024: proposal deadline.
- October 2, 2024: speaker notifications.
- October 3, 2024: schedule announcement.
- November 8, 2024: slides due.
- November 12, 2024: event day.
The CFP said accepted speakers had to submit slides before the conference. These dates are part of the completed 2024 call for proposals, not deadlines for a future event.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.How does it fit into Sigstore’s event history?
Sigstore’s 2022 program announcement described the first SigstoreCon as vendor-neutral and featured talks on keyless signing, trust roots, certificate authorities, software ecosystem integrations, and real-world adoption. It named Autodesk, Chainguard, GitHub, Google, IBM Research, Red Hat, and VMware in connection with talks, and identified Chainguard, Google, and Red Hat as sponsors of that 2022 event. Those historical details do not establish sponsorship or commercial relationships for the 2024 Supply Chain Day.
Recommended Free Tools
For background, see Sigstore’s September 14, 2022 program announcement.
Quick Recap
Best Value
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
