About the Author

Luke Hinds is the CTO of Stacklok. He is the creator of the open source project sigstore, which makes it easier for developers to sign and verify software artifacts. Prior to Stacklok, Luke was a distinguished engineer at Red Hat.

More posts by this author (11)

Stacklok has contributed Minder to the OpenSSF out of a deep belief in the power of the open source community

Luke Hinds /
Oct 28, 2024
Continue Reading

Cross-platform RAT deployed by weaponized 'requests' clone

Luke Hinds / Poppaea McDermott /
Aug 30, 2024
Continue Reading

Introducing the Frizbee GitHub Action: Automatically pin actions and container images to digests

Radoslav Dimitrov / Luke Hinds /
Jun 20, 2024
Continue Reading

Python typosquatting attack targets popular open source PyPI library with 30M weekly downloads

Luis Juncal / Luke Hinds /
Jun 6, 2024
Continue Reading

Announcing the Proof-of-Diligence (PoD) algorithm: A method of modeling trust and maintainability in open source ecosystems

Luke Hinds / Pankaj Telang /
Apr 17, 2024
Continue Reading

An analysis of an obfuscated JavaScript malware package

Luke Hinds / Edward Thomson /
Mar 27, 2024
Continue Reading

CVEs: The emperor's old clothes

Luke Hinds /
Feb 21, 2024
Continue Reading

What is software provenance, or proof of origin?

Luke Hinds /
Jan 5, 2024
Continue Reading

Exploring Llama 2 on a Apple Mac M1/M2

Luke Hinds / Prachi Jadhav /
Jul 19, 2023
Continue Reading
Page 1 of 2