Why Johnny Adopts Identity-Based Software Signing: A Usability Case Study of Sigstore (USENIX '26)[ARTIFACT]

Why Johnny Adopts Identity-Based Software Signing: A Usability Case Study of Sigstore (USENIX '26)[ARTIFACT]

This repository contains the artifact accompanying the paper “Why Johnny Adopts Identity-Based Software Signing: A Usability Case Study of Sigstore” by K.G. Kalu, S. Okorafor, T. Singla, S. Chen, S. Torres-Arias, and J.C. Davis.

Paper Citation

To cite the paper or this artifact:

@inproceedings{Kalu_Johnny-usability-study_2026,
  title     = {Why Johnny Adopts Identity-Based Software Signing: A Usability Case Study of Sigstore},
  author    = {Kelechi G. Kalu and Sofia Okorafor and Tanmay Singla and Sophie Chen and Santiago Torres-Arias and James C. Davis},
  booktitle = {Proceedings of the 35th USENIX Security Symposium (USENIX Security '26)},
  year      = {2026},
  address   = {Baltimore, MD, USA},
  publisher = {USENIX Association}
}

Artifact Contents

This artifact is distributed as a ZIP file containing:

• README.md — instructions for navigating the artifact and locating materials
• Technical-Report.pdf — an extended version of the paper with detailed appendices
• Codebook.xlsx — analysis spreadsheet (e.g., interview protocol, codebook material)

Download and extract the ZIP, then start with README.md for guidance.