Blog
The philosophical end of the signing series: a stolen key and a bought one produce the same signature, and trust has to survive both.
Rotate a release signing key and recover from a bad one without locking users out. Why asymmetric KMS keys have no auto-rotate button.
Launching krites, a local-first wedding photo culler built for one photographer who had four thousand frames and a weekend to get through them.
Make a tagged release sign itself: record the KMS key and regenerate GoReleaser config with a signs block that calls gtb sign directly.
Embed the trust anchor in your binary and require signature verification on update, without bricking anyone already running an old build.
Mint an OpenPGP public key from a KMS-held private key you cannot hold, and publish it somewhere the release platform cannot reach.
Let CI sign with a KMS key without storing any AWS credentials, using OIDC federation. Covers both the GitLab and the GitHub path.
Hundreds of malicious package versions across three ecosystems, and the uncomfortable fact that installing one runs arbitrary code.
Ten years on from taking the name: the Boy Scout Rule scales from a function to a team, because it is about intention rather than size.
Stand up a production signing key in AWS KMS with Terraform, so the private half is generated inside KMS and can never be exported.
signing
Soapbox
go-tool-base
Orienteering
krites
First Light
Campfire