#sigstore
Live, measured metrics for the hashtag #sigstore from the open social web. Every number carries a named source and the time it was fetched. Nothing is estimated.
Own #sigstore
This #name is available to claim. It becomes your portal on the open agent web: this very page, a keyword you rank for by an open public stake, and a verifiable identity for AI agents. Nobody else sells a page like this for every #name.
Day-by-day usage
measured · mas.to (Mastodon public tags API) · fetched 2026-10-14 02:34 UTC1 uses by 1 unique accounts across the window. Real per-day counts, not estimates. Newest bar is today so far.
Related hashtags
measured · mas.to (Mastodon public search API) · fetched 2026-10-14 02:34 UTCLive pulse
measured · mas.to (Mastodon tag timeline) · fetched 2026-10-14 02:34 UTCEverything below is measured over the latest 40 public posts (spanning ~16263 hours).
Posting hours (UTC) — busiest: 19:00
Languages: English (31) · Polish (5) · Russian (3) · Swedish (1)
Avg boosts / post: 1.3
Top of the latest posts
For the last couple of weeks, I've been deep diving into container supply chain security. I built a full GitHub Actions demo pipeline: • Vulnerability scanning • SBOM generation • Keyless signing + attestations • SLSA build provenance The s
Agreed @todd_a_jacobs. To head off anticipated objections "but PEP 761 doesn't *mandate* using #GitHub or #Google": Technically true, but there's no open implementation #Python is willing to rely on today. PEP 761 steps *backward* from open
SolarWinds wasn't a zero-day. It was a signed, trusted build. Cosign fixes that. Sign, verify, enforce image signatures with keyless and key-based workflows plus CI/CD. https://www.valtersit.com/guides/docker/container-image-signing-with-co
What “sigstore” means
WikipediaThe Open Source Security Foundation (OpenSSF) is a cross-industry forum for collaborative improvement of open-source software security. Part of the Linux Foundation, the OpenSSF works on various technical and educational initiatives to improve the security of the open-source software ecosystem.
“Open Source Security Foundation” on Wikipedia (CC BY-SA) →#sigstore across platforms
every network with a public tag surfaceFollow #sigstore straight to each platform’s own tag page. Where a platform publishes open data we measure it above; the rest lock their numbers behind paid APIs, so we link rather than guess.
Every number above is measured from a named public API at the shown fetch time. Nothing is estimated or extrapolated. Platforms that lock their data behind paid APIs are not shown. Agents: the same numbers, as JSON, at /api/hashtags/sigstore