Главная
Study mode:
on
You
History
Saved
In progress 0 courses
compleat 0 courses
#Art & Design #Adobe #ChatGPT #GitHub

#SLSA

Showing: 61 courses
CNCF [Cloud Native Computing Foundation]

Securing the Supply Chain: A Practical Guide to SLSA Compliance from Build to Runtime

0 rewiews
Dive into SLSA compliance for supply chain security using CNCF tools. Explore GitHub Actions, Cosign, Kyverno, in-toto, and Kubescape to secure software from build to runtime in Kubernetes ecosystems.
Add to list
1 Lesons
33 minutes
On-Demand
Free-Video
Linux Foundation

Security Threat Model Analysis and Protection Practice in Edge Computing Scenarios

0 rewiews
Analyze security threats in edge computing, explore KubeEdge's audit process, and learn protection practices for cloud-native environments. Gain insights on improving security in multi-cloud and hybrid scenarios.
Add to list
1 Lesons
44 minutes
On-Demand
Free-Video
Linux Foundation

Securing Your Supply Chain by Building with FRSCA

0 rewiews
Explore FRSCA, an OpenSSF project implementing CNCF's Secure Software Factory Reference Architecture to protect against supply chain attacks and enhance build pipeline security.
Add to list
16 Lesons
38 minutes
On-Demand
Free-Video
Linux Foundation

Ketchup, Mustard, and Relish of Software Supply Chain Security - Panel Discussion

0 rewiews
Explore open source standards and tools for enhancing software supply chain security with industry experts. Learn about S2C2F, SLSA, and FRSCA, their benefits, and how to implement them effectively.
Add to list
1 Lesons
46 minutes
On-Demand
Free-Video
Linux Foundation

SLSA in Action: Securing the Software Supply Chain

0 rewiews
Live demonstration of securing software supply chain and achieving SLSA compliance using sample repo. OpenSSF SLSA group showcases tooling developed to meet SLSA 1.0 Build Specification, offering practical insights into implementation.
Add to list
1 Lesons
40 minutes
On-Demand
Free-Video
Linux Foundation

Google SLSA and NIST SSDF - Emerging Software Supply Chain Security Best Practices

0 rewiews
Explore emerging best practices for software supply chain security, focusing on Google's SLSA framework and NIST's SSDF guidelines to enhance your organization's cybersecurity posture.
Add to list
1 Lesons
29 minutes
On-Demand
Free-Video
Linux Foundation

Road to SLSA3 - Non-falsifiable Provenance in Tekton with SPIFFE/SPIRE

0 rewiews
Explore non-falsifiable provenance in Tekton using SPIFFE/SPIRE, enhancing software supply chain security and achieving SLSA3 compliance.
Add to list
1 Lesons
38 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

Building SLSA 3 Conformant Attestors for Artifacts Generated on GitHub

0 rewiews
Learn to create SLSA 3 compliant attestors for GitHub artifacts, enhancing software supply chain security with minimal effort using recent framework extensions.
Add to list
1 Lesons
34 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

Filling the Gaps in Kubernetes Flavored SLSA with Threat Modeling

0 rewiews
Explore threat modeling for Kubernetes CI/CD security using SLSA standards. Learn to identify and mitigate vulnerabilities in supply chain processes, with practical insights from Tekton's implementation.
Add to list
1 Lesons
33 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

Achieving End-to-End Software Supply Chain Security with in-toto

0 rewiews
Explore in-toto's advancements in software supply chain security, including artifact tracking, attestation types, and integrations with CNCF projects for cloud-native identity protection.
Add to list
1 Lesons
35 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

Supply Chain Security: Building a Knowledge Graph for Artifact Relationships

0 rewiews
Explore a supply chain knowledge graph tool that enhances understanding of artifact relationships, enabling better assessment of vulnerabilities and dependencies in software development.
Add to list
1 Lesons
34 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

SLSA with Cosign and Kyverno - Securing Software Delivery in Cloud Native Environments

0 rewiews
Explore SLSA, Cosign, and Kyverno for enhancing software delivery security in cloud-native environments. Learn practical techniques to safeguard your development pipeline.
Add to list
1 Lesons
1 hour
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

SLSA FRSCA Recipe for Secure Supply Chain

0 rewiews
Explore an end-to-end solution for software supply chain security using OpenSSF-FRSCA, integrating tools like Tekton, Sigstore, and Kyverno to meet SLSA Level 3 requirements.
Add to list
1 Lesons
33 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

In-Toto: Attestations and Software Supply Chain Security

0 rewiews
Explore in-toto framework's advancements in software supply chain security, including attestation verification, type mapping, and integrations with CNCF projects and industry tools.
Add to list
1 Lesons
35 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

Secure Kubernetes Supply Chain: Lessons and Tools for Project Releases

0 rewiews
Explore Kubernetes' enhanced security features for software supply chain, including SBOMs, provenance attestations, and digital signatures. Learn to implement these tools in your projects.
Add to list
1 Lesons
34 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

Putting the Supply Chain Pieces Together: A Deep Dive into the Secure Software Factory

0 rewiews
Explore a deep dive into supply chain security, focusing on implementing CNCF's Secure Software Factory architecture using cloud-native tools to enhance software provenance and artifact trustworthiness.
Add to list
9 Lesons
20 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

Securing the Supply Chain with Witness - A Framework for Supply Chain Security

0 rewiews
Explore Witness, an open-source framework for supply chain security, its trust model, and implementation in CI pipelines. Learn about attestation collections, policy enforcement, and integration with cloud-native tools.
Add to list
11 Lesons
23 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

Securing Your Container Native Supply Chain with SLSA, GitHub and Tekton

0 rewiews
Practical guide to securing container native supply chains using SLSA principles, in-toto attestations, and step-by-step demos for achieving SLSA Level 2 in Tekton and Github Actions.
Add to list
1 Lesons
32 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

A Mouthful of Mayhem: Taste Test and Gut Response to SLSA, GUAC, and Supply Chain Security

0 rewiews
Explore popular supply chain security ingredients and learn how to combine them effectively to address threats in your organization's ecosystem.
Add to list
1 Lesons
36 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

Securing the Supply Chain: A Practical Guide to SLSA Compliance from Build to Runtime

0 rewiews
Practical guide to securing software supply chain using CNCF tools. Covers SLSA compliance, GitHub Actions, Cosign, Kyverno, in-toto, and Kubescape for build-to-runtime security in Kubernetes ecosystems.
Add to list
1 Lesons
34 minutes
On-Demand
Free-Video
Linux Foundation

The Road to Zero CVEs: People and Technology

0 rewiews
Explore open source software vulnerabilities, supply chain security legislation, and emerging tools like Sigstore to fortify digital ecosystems and manage CVEs effectively.
Add to list
1 Lesons
36 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

Navigating the Software Supply Chain Defense Landscape

0 rewiews
Explore software supply chain security tools and frameworks, their integration, and how to select the right combination for comprehensive protection against rising cyber threats.
Add to list
1 Lesons
23 minutes
On-Demand
Free-Video
Linux Foundation

Fresh SLSA and GUAC - Understanding Open Source Package Risks and Transparency

0 rewiews
Explore open source package risks, transparency, and tools like GUAC, SLSA, and SBOMs to enhance software supply chain security and make informed decisions on dependencies.
Add to list
1 Lesons
40 minutes
On-Demand
Free-Video
OpenSSF

Eating the Open Source Security Sandwich with Skootrs

0 rewiews
Explore Skootrs, an open-source tool simplifying adoption of security practices for software developers through automation and guardrails.
Add to list
1 Lesons
19 minutes
On-Demand
Free-Video
OpenSSF

SLSA: A Security Paradigm for Software Supply Chain Integrity

0 rewiews
Explore SLSA levels, software supply chain security basics, and tools like Cosign to enhance artifact integrity and benefit your organization.
Add to list
1 Lesons
58 minutes
On-Demand
Free-Video
OpenSSF

Securing the Software Supply Chain: An In-Depth Exploration of SLSA

0 rewiews
Explore SLSA's impact on software supply chain security, covering fundamentals, trust, transparency, security levels, industry effects, and future trends.
Add to list
1 Lesons
59 minutes
On-Demand
Free-Video
DevConf

Securing Python Projects Supply Chain

0 rewiews
Explore best practices and tools for securing Python projects' supply chain, from development to distribution. Learn about cryptographic signatures, SBOMs, and SLSA attestations.
Add to list
17 Lesons
35 minutes
On-Demand
Free-Video
DevSecCon

SLSA: Enhancing Software Supply Chain Security - More Than Just a Garnish for Your Pipelines

0 rewiews
Explore SLSA principles for securing software supply chains. Learn threat models, security levels, and how to contribute to this OpenSSF project for enhanced DevSecOps processes.
Add to list
1 Lesons
50 minutes
On-Demand
Free-Video
OpenSSF

Let Devs Be Devs Without Sacrificing Security

0 rewiews
Explore flexible, secure CI pipelines using Tekton, Chains, and Enterprise Contract to balance developer innovation with robust security measures for various software targets.
Add to list
1 Lesons
18 minutes
On-Demand
Free-Video
DevConf

SLSA - A Supply Chain Security Framework

0 rewiews
Explore SLSA framework for securing software supply chains, mitigating vulnerabilities, and ensuring code integrity from development to deployment.
Add to list
1 Lesons
14 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

Cloud Native Security Landscape - Myths, Dragons, and Real Talk

0 rewiews
Explore cloud-native security across the software lifecycle, from open-source creation to runtime threat detection. Learn about key projects, developer-security team collaboration, and separating real risks from myths.
Add to list
1 Lesons
39 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

Cloud Native Supply Chain Security: Beyond SBOMs - Perspectives and Practices

0 rewiews
Insights on cloud native supply chain security beyond SBOMs. Experts discuss straightforward approaches, simple security practices, and future perspectives using open-source tools and frameworks.
Add to list
1 Lesons
35 minutes
On-Demand
Free-Video
Linux Foundation

Open Source Security and Supply Chain Innovations - Keynote Sessions

0 rewiews
Explore cutting-edge topics in open source security, including supply chain protection, Sigstore, SPDX, eBPF, SLSA, and memory safety, presented by industry leaders and experts.
Add to list
1 Lesons
1 hour 57 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

Releasing Kubernetes Less Often and More Securely - SIG Release Update

0 rewiews
Discover the latest updates from Kubernetes SIG Release, including efforts to enhance security, streamline release processes, and achieve SLSA compliance. Learn about roadmap, vision, and opportunities to contribute.
Add to list
1 Lesons
19 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

Trust in Honk, Tie Up Your YAML - A Kpack Experience for Container Image Building

0 rewiews
Explore kpack for building container images on Kubernetes, leveraging Cloud Native Buildpacks and enhancing supply chain security through declarative resources and automated processes.
Add to list
1 Lesons
29 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

Building Images for the Secure Supply Chain

0 rewiews
Techniques and tools for building secure container images, including distroless philosophy, updating dependencies, using apko for reproducibility, and signing with Sigstore.
Add to list
1 Lesons
28 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

Securing the IaC Supply Chain

0 rewiews
Explore securing Infrastructure as Code supply chains, applying software security principles to IaC pipelines. Learn about Crossplane's integration with Sigstore for enhanced provenance and attestations.
Add to list
1 Lesons
21 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

How SIG Release Cooks Trustworthy Artifacts From Raw Source Code - Kubernetes Build Process

0 rewiews
Explore how Kubernetes SIG Release transforms source code into trusted artifacts, focusing on SLSA compliance, community-controlled infrastructure, and expanded artifact signing.
Add to list
1 Lesons
38 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

Spicing up Container Image Security with SLSA and GUAC

0 rewiews
Explore SLSA and GUAC tools to enhance container image security, verify build provenance, and understand artifact composition for safer deployments in production environments.
Add to list
1 Lesons
36 minutes
On-Demand
Free-Video
Linux Foundation

Open Tools for Secure Supply Chains in Kubernetes - From Release Engineering

0 rewiews
Explore open-source tools for secure software supply chains, focusing on Kubernetes' journey to SLSA Level 3 compliance and how other projects can leverage these tools for enhanced security.
Add to list
10 Lesons
35 minutes
On-Demand
Free-Video
Devoxx

Software Supply Chain Security for Those in a Rush

0 rewiews
Concise overview of software supply chain security concepts like SBOM, SLSA, and GUAC. Gain insights into emerging cybersecurity threats and their importance in the industry.
Add to list
1 Lesons
15 minutes
On-Demand
Free-Video
NDC Conferences

SLSA, SigStore, SBOM & Software Supply Chain Security - What Does It All Mean?

0 rewiews
Demystifying software supply chain security: SLSA, SigStore, and SBOM explained. Learn about tools and methodologies to secure software from development to production in this comprehensive overview.
Add to list
1 Lesons
43 minutes
On-Demand
Free-Video
PyCon US

Securing the Open Source Software Supply Chain

0 rewiews
Explore tools and best practices for securing the open-source software supply chain, addressing vulnerabilities, and enhancing trust in the ecosystem. Learn about recent developments and future improvements.
Add to list
39 Lesons
30 minutes
On-Demand
Free-Video
OpenSSF

Continuous Assurance of Supply Chain Security Levels of Open Source Artifacts Using SLSA 0.1

0 rewiews
Discover how to verify SLSA provenance in trusted build systems to enhance supply chain security and protect against modified sources, compromised builds, and package tampering.
Add to list
1 Lesons
11 minutes
On-Demand
Free-Video
OpenSSF

Navigating the Open Source Policy Labyrinth: Unraveling Global Policy Efforts for a Secure Future

0 rewiews
Explore global policy initiatives shaping open-source software security, from US Executive Orders to EU regulations, while understanding how modern frameworks like SLSA and Software Self Attestation enhance digital infrastructure.
Add to list
1 Lesons
29 minutes
On-Demand
Free-Video
OpenSSF

Meeting the OpenSSF Security Baseline with Minder

0 rewiews
Discover how Minder platform helps monitor and ensure OpenSSF Security Baseline compliance across repositories, with practical demonstrations of automated security posture management.
Add to list
1 Lesons
24 minutes
On-Demand
Free-Video
OpenSSF

End-to-End Secure Machine Learning Development - Building a Secure AI Supply Chain

0 rewiews
Discover essential security practices for AI development, from dataset handling to production deployment, focusing on supply chain security, model provenance, and risk mitigation in machine learning applications.
Add to list
1 Lesons
23 minutes
On-Demand
Free-Video
Linux Foundation

Fast, Correct, Secure - Building Reliable and Secure Software with Bazel

0 rewiews
Explore advanced Bazel features for building secure, fast, and correct software at scale, including SBOM generation, audit trails, and achieving SLSA compliance in development pipelines.
Add to list
1 Lesons
29 minutes
On-Demand
Free-Video
DevSecCon

Understanding Software Component Analysis (SCA) in Plain Language

0 rewiews
Gain insights into software supply chain security concepts like SBOM, VEX, and SLSA, demystifying their importance for protecting organizational assets and code integrity.
Add to list
1 Lesons
15 minutes
On-Demand
Free-Video
DevSecCon

SBOM: The Inescapable Way of Tracking Dependencies

0 rewiews
Explore SBOM's role in preventing cyber-attacks, its formats, and implementation across the software development lifecycle. Learn to generate, manage, and monitor SBOMs for enhanced security.
Add to list
1 Lesons
15 minutes
On-Demand
Free-Video
OpenSSF

Better Build Pipelines with OpenSSF Projects - Enhancing Trust and Security

0 rewiews
Enhance build pipeline security using OpenSSF projects: cosign, SBOMs, and SLSA. Demonstrate kpack for container image building on Kubernetes, integrating signed images and SBOM generation.
Add to list
1 Lesons
14 minutes
On-Demand
Free-Video
OpenSSF

What Is Going On In Your Source Code? Understanding Software Component Analysis in Plain Language

0 rewiews
Gain insights into software supply chain security concepts like SBOM, VEX, and SLSA, understanding their importance in protecting organizations from emerging security threats.
Add to list
1 Lesons
30 minutes
On-Demand
Free-Video
OpenSSF

PEP 740 and PyPI - Bootstrapping Provenance for the Python Ecosystem

0 rewiews
Explore how PEP 740 enhances PyPI's security through digital attestations, integrating with Sigstore and SLSA to provide robust package provenance without complex key management.
Add to list
1 Lesons
31 minutes
On-Demand
Free-Video
Eclipse Foundation

Open Source Software Supply Chain Security - Understanding Threats and Best Practices

0 rewiews
Explore critical threats to open source software supply chains, industry best practices for security, and practical strategies for protecting against vulnerabilities and cyberattacks.
Add to list
1 Lesons
39 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

Security Threat Model Analysis and Protection Practice in Edge Computing

0 rewiews
Análisis de modelos de amenazas y prácticas de protección en computación de borde, incluyendo auditoría de seguridad de KubeEdge, iniciativas de mejora y cumplimiento SLSA L3 para fortalecer la seguridad en escenarios de edge computing.
Add to list
1 Lesons
44 minutes
On-Demand
Free-Video
Linux Foundation

Improving Supply Chain Integrity with OpenSSF Technologies - Panel Discussion

0 rewiews
Experts discuss OpenSSF technologies like SLSA, S2C2F, and GUAC, exploring their impact on open source security and software supply chain integrity. Learn about implementation and improving security posture.
Add to list
1 Lesons
40 minutes
On-Demand
Free-Video
DevSecCon

GitHub-Azure Authentication and SLSA in DevOps

0 rewiews
Explore GitHub Actions authentication for Azure and SLSA principles in DevSecOps. Learn passwordless methods, security levels, and contribute to open-source supply chain security projects.
Add to list
1 Lesons
1 hour 18 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

Secure by Design CI/CD: Practical Insights for Pipeline Security

0 rewiews
Discover practical strategies for securing CI/CD pipelines through real-world insights from Adobe and Autodesk, featuring reference architectures, security controls, and implementation of CNOE stacks for cloud-native excellence.
Add to list
1 Lesons
43 minutes
On-Demand
Free-Video
Eclipse Foundation

Secure Development in Open Source - The Road to SLSA Level 3 Compliance for Eclipse Temurin

0 rewiews
Discover how Eclipse Temurin achieves SLSA Level 3 compliance through secure development practices, cloud-based Jenkins implementations, and open-source distribution methods across multiple platforms.
Add to list
1 Lesons
37 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

Secure Release Processes with in-Toto Policy Verification

0 rewiews
Discover how to enforce secure software release processes using in-toto's policy verification system, covering attestations, SDLC compliance, and build provenance for enhanced security measures.
Add to list
1 Lesons
33 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

Practical Supply Chain Security: Implementing SLSA Compliance from Build to Runtime

0 rewiews
Discover practical strategies for implementing SLSA compliance, from using GitHub Actions and Cosign for artifact signing to enforcing runtime policies with Kyverno and securing keys with HSMs.
Add to list
1 Lesons
32 minutes
On-Demand
Free-Video