The newest open-source project hosted by the Linux Foundation is OpenPubkey, which is a collaboration with Docker and BastionZero and will be available for Docker container signing with zero-trust passwordless authentication.
OpenPubkey is born out of BastionZero’s secure infrastructure access product and comes down to being a protocol to securely and accurately bind cryptographic keys to users and workloads by creating a CA out of an OpenID Connect Identity Provider. The hope is OpenPubkey can help secure the software supply chain for Docker and other software projects.
