Sigstore
If you like applying Sigstore, every challenge here gives you a chance to practice it on a real industry brief.
- CodeAdvancedNew
Secure the Software Supply Chain of an Open-Source SDK
Audit the current state: dependency tree, publish process, GitHub Actions workflows, signing posture. Generate an SBOM (CycloneDX format) using Syft. Run OpenSSF Scorecard and t…
- Supply Chain Security
- Slsa
- Sbom
Software Security - CodeAdvancedNew
Supply-Chain Hardening: SLSA-Aligned Build Pipeline for an Apache Project
Audit the project's current release pipeline (GitHub Actions, release-script). Map the current state against the SLSA v1.0 requirements (source, build, provenance, dependencies)…
- Supply Chain
- Slsa
- Sigstore
Open Source Contribution and Maintainership
How it works
From brief to credential, in six steps.
Step 01
Browse challenges aligned to your studies.
Step 02
Accept the one that fits your goals.
Step 03
Work through it with AI Copilot guidance.
Step 04
Submit for structured evaluation.
Step 05
Earn a verified credential.
Step 06
Add it to LinkedIn with one click.
Industry teams behind a decade of practitioner briefs
Hiring from this pool?
Sponsor a challenge and meet candidates through actual work.
Industry teams can shape briefs around the skills they hire for, then evaluate students on rubric-scored deliverables — not resumes.