SE Radio 712: Dan Lorenc on Sigstore

About this episode

Dan Lorenc discusses Sigstore and its importance in securing the software supply chain.

Dan Lorenc, co-founder and CEO of Chainguard, joins host Priyanka Raghavan to explore Sigstore and its role in securing the software supply chain. They unpack the challenges of supply chain security, including verifying the origin and integrity of software artifacts, and explain the problems Sigstore is designed to solve. The conversation goes under the hood to examine how Sigstore works, covering key components such as code signing, verification, the certificate authority model, and transparency logs—often compared conceptually to blockchain for their auditability. The episode also highlights real-world adoption, community resources for getting started, and closes with a discussion of Chainguard Images and how development teams can use them to build with more secure base images. This episode is sponsored by IEEE Computer Society.

People in this episode

Host: Priyanka Raghavan

Guest: Dan Lorenc

Topics covered

• software supply chain
• security
• code signing
• verification
• transparency logs
• real-world adoption

Keywords

• Sigstore
• software supply chain
• security
• code signing
• verification
• Chainguard Images
• transparency logs

Sponsors

IEEE Computer Society

Mentioned in this episode

Organizations: Chainguard

More episodes of Software Engineering Radio - The Podcast for Professional Software Developers

• SE Radio 723: Dave Airlie on Linux Kernel Maintenance · June 3, 2026 · 1h 9m
• SE Radio 722: Dwayne McDaniel on the Engineering Challenges of Secrets Management · May 27, 2026 · 52 min
• SE Radio 721: Rob Moffat on Risk-First Software Development · May 20, 2026 · 53 min
• SE Radio 720: Martin Dilger on Understanding Eventsourcing · May 13, 2026 · 56 min
• SE Radio 719: Birol Yildiz on Building an Agentic AI SRE · May 6, 2026 · 54 min
• SE Radio 718: Will Sentance on JS Modernization · April 29, 2026 · 59 min