Secure Software Publication

Datadog has implemented a robust system for the secure publication of Datadog Agent integrations, leveraging TUF and in-toto to ensure end-to-end verification and compromise resilience. This system allows for independent and on-demand release of integrations, enhancing security and agility in the software supply chain. This post details the integration of TUF for secure transport and key management, and in-toto for end-to-end supply chain verification, with developers signing integrations using Yubikeys and GPG.