Neowin News Feed for: Provenance

GitHub increases verifiability of npm packages for added security

Paul Hill — Thu, 20 Apr 2023 02:12:02 +0000

GitHub now allows npm package developers to link their published packages to their source code to prove that the package was built from the source. This will help build trust and boost security. Read more...

Sigstore is a Linux Foundation project developed by Google and Red Hat for code signing

Usama Jawad — Wed, 10 Mar 2021 05:30:01 +0000

Sigstore is a new Linux Foundation project described as "Let's Encrypt for Code Signing". The tool is developed by Google, Red Hat, and Smallstep, and is designed to offer better provenance for code. Read more...

Microsoft, Intel, BBC and others form coalition to combat misinformation

Usama Jawad — Mon, 22 Feb 2021 15:26:01 +0000

Numerous entities from the technology and media sector such as BBC, Intel, Microsoft, and Arm have joined forces to form the Coalition for Content Provenance and Authenticity (C2PA). Read more...