TechPrufer
Sign inGet started

Blogs›Datadog›Secure Software Publication

Secure Software Publication

Secure Software Publication

1
posts
2019

Datadog has implemented a robust system for the secure publication of Datadog Agent integrations, leveraging TUF and in-toto to ensure end-to-end verification and compromise resilience. This system allows for independent and on-demand release of integrations, enhancing security and agility in the software supply chain.

2019

Secure publication of Datadog Agent integrations with TUF and in-toto | Datadog

6/3/2019

This post details the integration of The Update Framework (TUF) and in-toto to secure the publication of Datadog Agent integrations. It explains how TUF provides a compromise-resilient mechanism for distributing and revoking keys and metadata, while in-toto guarantees the integrity of the software supply chain by specifying a fixed series of steps with signed metadata. The post also describes how developers sign integrations using Yubikeys and GPG, and how the Datadog Agent transparently verifies these integrations.