Secure publication of Datadog Agent integrations with TUF and in-toto | Datadog

This post details the integration of TUF for secure transport and key management, and in-toto for end-to-end supply chain verification of Datadog Agent integrations. It explains how developers sign integrations using Yubikeys and GPG, and how the Datadog Agent transparently downloads and verifies these integrations using TUF and in-toto.