thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Application & OT Security · Advanced

Rekor

Sigstore's public, append-only transparency log that records signing events and attestations.

Definition

Rekor entries let anyone audit when an artifact was signed and by which identity, so misuse of signing identities can be detected. It is analogous to Certificate Transparency for software signatures.

Example

A security team monitors Rekor for signatures made with its project's identity that did not come from its CI.

Exam tip

Transparency log = tamper-evident public record.

Related terms