Introducing the Free DSSE Attestation Online Decoder, Built for the Community by JFrog

DSSE, or Dead Simple Signing Envelope, is a standard JSON format for signing arbitrary data, widely accepted for attesting software supply chain security, particularly for SLSA provenance and attestations verification. In this demo, learn how you can use our free DSSE Attestation Online Decoder (https://dsse.io/) and decode your DSSE envelopes into verified evidence payload, in just seconds!

What you'll learn in this session:

• What is DSSE?
• How dsse.io works
• Demo of how to use dsse.io to decode your DSSE envelopes

Timestamps ⏰

00:00-0:28 Overview

00:29-0:43 What is DSSE?

0:44 - 1:05 Introducing dsse.io

1:06 - 1:52 How It Works

1:53 - 2:40 Demo: DSSE Envelope Input

2:41 - 3:47 Demo: Sigstore Bundle Input

3:48 - 4:10 End Summary and Closing