<?xml version="1.0" encoding="utf-8" standalone="yes"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
  <channel>
    <title>Cyber Resilience Act on blog.monitoring-plugins.pro</title>
    <link>https://blog.monitoring-plugins.pro/tags/cyber-resilience-act/</link>
    <description>Recent content in Cyber Resilience Act on blog.monitoring-plugins.pro</description>
    <generator>Hugo</generator>
    <language>en-us</language>
    <lastBuildDate>Tue, 19 May 2026 00:00:00 +0000</lastBuildDate>
    <atom:link href="https://blog.monitoring-plugins.pro/tags/cyber-resilience-act/index.xml" rel="self" type="application/rss+xml" />
    <item>
      <title>Strengthening the Software Supply Chain: Signed Releases and SBOM Scanning</title>
      <link>https://blog.monitoring-plugins.pro/posts/2026-05-19-sbom-signing/</link>
      <pubDate>Tue, 19 May 2026 00:00:00 +0000</pubDate>
      <guid>https://blog.monitoring-plugins.pro/posts/2026-05-19-sbom-signing/</guid>
      <description>&lt;p&gt;We&amp;rsquo;ve shipped two security improvements that make it easier to trust the plugins you download and run from us. Both are now live and will apply to all future releases.&lt;/p&gt;&#xA;&lt;h2 id=&#34;signed-release-archives&#34;&gt;Signed Release Archives&lt;/h2&gt;&#xA;&lt;p&gt;Every release archive on &lt;a href=&#34;https://releases.monitoring-plugins.pro/&#34; target=&#34;_blank&#34; rel=&#34;noopener noreferrer&#34;&gt;https://releases.monitoring-plugins.pro/&lt;/a&gt;&#xA; now ships with a detached OpenPGP signature — a small &lt;code&gt;.asc&lt;/code&gt; file next to each &lt;code&gt;.tar.gz&lt;/code&gt;. Publishing an archive without a matching signature is no longer possible, and we have retroactively signed every archive that was already available, so the complete release history is covered.&lt;/p&gt;</description>
    </item>
  </channel>
</rss>
