Scarf

Big news from our friends at Chainguard 🎉 Today, Chainguard announced Commercial Builds, a new initiative designed to deliver secure, verifiable container images with zero known vulnerabilities for both open source and commercial software. Smallstep is proud to be included alongside an incredible group of partners like GitLab, Elastic, Grafana Labs, F5 NGINX, Mattermost, and Percona. Modern infrastructure runs on workloads, automation, and non-human identities. As those systems multiply, long-lived keys and manual certificate rotation simply don’t scale anymore. Our CEO and Founder, Michael Malone captured it perfectly: “As certificate lifetimes shrink toward 47 days—and AI agents and MCP toolchains multiply non-human access—manual rotation and long-lived keys won’t scale. Step-ca is relied on by 78 of the Fortune 100, and with Chainguard Commercial Builds and Step CA Pro we’re helping customers reduce supply-chain risk while automating workload identity and mTLS in production.” We’re excited to work with the Chainguard team to help organizations reduce supply chain risk and automate secure workload identity across modern infrastructure. 👉 Read the announcement: https://hubs.ly/Q04744TB0 #Smallstep #Chainguard #SupplyChainSecurity #mTLS #WorkloadIdentity #CyberSecurity

If you are in the business of data and insights, then you probably know that your product's impact on your customers is a function of how deeply your data is plugged into your their day-to-day operations. Historically, Scarf has relied on our customers either doing their work within the Scarf platform itself, or period exports to places like their CRM or data lake. This works well, but not quite the real time data feed that customers wanted. Today, we're fixing that and launching webhook support! When organizations reach new adoption milestones with your open source, your team and your AI agents can get to work in real time.

One fact about Scarf that people are most surprised by is that we are approved for use for open source projects within The Apache Software Foundation. In fact, the ASF was the one of first open source foundations to officially partner with us, and the commercial ecosystem around ASF projects as a whole is even stronger for it. Today, I'm excited to share a new case study highlighting our work with Wherobots and Apache Sedona. Our work together helped Wherobots go from "flying blind" to a data-driven and coordinated GTM process around their open source adoption. Read the full case study here: https://lnkd.in/gmSU6ZeK

🌲 Grow a healthy, sustainable, and profitable open-source project. At #OSACON 25 Peculiar C. Umeh, Anastasiia Zvenigorodskaia, and Avi Press will host an unmissable panel where they'll share practical lessons for building successful businesses around open code. 📈 Join this group of passionate and trendsetting leaders for a vibrant talk full of real-world tactics for keeping #opensource relevant for the long term. 💬 🔗 More info at: https://lnkd.in/emJ8NMJ7 💻 Register for free: osacon.io

I'm gearing up for a few conferences to close off 2025: 1. Tomorrow and Wednesday I'll be at GitHub Universe in SF. 2. Next month, it's Kubecon NA in Atlanta. Come find Scarf at our booth, 1461! 3. In December, Homer Canlas and I will be AWS Re:Invent in Las Vegas. Will you be at any of these? If so, drop a comment. Let's meet in person!