USING REKOR-MONITOR TO SCAN YOUR TRANSPARENCY LOGS

Summary from the TLDR InfoSec newsletter

Sigstore's Rekor provides a signature transparency log and Fulcio provides a certificate transparency which can be used to enhance auditability and discoverability of artifact metadata and code signing. Rekor-monitor can be utilized for checking the consistency of transparency logs or monitoring for compromised accounts. A demo is included in the post.