Главная
Study mode:
on
You
History
Saved
In progress 0 courses
compleat 0 courses
#Art & Design #Adobe #ChatGPT #GitHub

#Sigstore

Showing: 93 courses
Linux Foundation

Policy Compliance with Sigstore - From Signing Software to Validating the Whole Software Supply Chain

0 rewiews
Explore sigstore for software signing and verification, and learn how to implement policy compliance in cloud-native software build and deployment processes using automation and tools.
Add to list
9 Lesons
34 minutes
On-Demand
Free-Video
Linux Foundation

Software Supply Chain Integrity with Sigstore

0 rewiews
Learn about Sigstore, a tool for securing software supply chains, with demos on Cosign for signing and verifying artifacts, and insights on its practical applications.
Add to list
18 Lesons
23 minutes
On-Demand
Free-Video
Linux Foundation

Privacy-preserving Approaches to Transparency Logs

0 rewiews
Explore append-only transparency logs, their applications in infrastructure, and privacy-preserving techniques to balance immutability with user rights and data protection.
Add to list
21 Lesons
39 minutes
On-Demand
Free-Video
Linux Foundation

Gitsign - Keyless Git Commit Signing

0 rewiews
Explore Gitsign, a Sigstore project enabling keyless Git commit signing. Learn its functionality, integration with Sigstore, and application in development, CI/CD, and GitOps workflows.
Add to list
1 Lesons
37 minutes
On-Demand
Free-Video
Linux Foundation

Zero-Trust Supply Chain Security with Sigstore, TektonCD and SPIFFE

0 rewiews
Explore cutting-edge tools for enhancing software supply chain security, focusing on Sigstore, TektonCD, and SPIFFE implementations in zero-trust environments.
Add to list
1 Lesons
50 minutes
On-Demand
Free-Video
Linux Foundation

Bringing Provenance to Open Source - Lessons from Npm's Sigstore Integration

0 rewiews
Explore npm's integration with Sigstore to enhance package provenance, addressing security challenges and implications for the broader open-source ecosystem.
Add to list
1 Lesons
27 minutes
On-Demand
Free-Video
Linux Foundation

Verifying the Validity of Crowd-Sourced Results in Open Source Security - The Scorecard GitHub Action and Sigstore

0 rewiews
Explore how the Scorecard GitHub Action ensures security in open-source projects, using Sigstore for result integrity and remote attestation in crowd-sourced data validation.
Add to list
1 Lesons
32 minutes
On-Demand
Free-Video
Linux Foundation

Software Supply Chain Security Case Study at Anaconda

0 rewiews
Explore real-world experiences in securing a large-scale open-source packaging pipeline, addressing challenges, implementing solutions, and achieving positive outcomes using respected security designs.
Add to list
1 Lesons
43 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

Filling the Gaps in Kubernetes Flavored SLSA with Threat Modeling

0 rewiews
Explore threat modeling for Kubernetes CI/CD security using SLSA standards. Learn to identify and mitigate vulnerabilities in supply chain processes, with practical insights from Tekton's implementation.
Add to list
1 Lesons
33 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

TUF-En Up Your Signatures - Enhancing Software Distribution Security

0 rewiews
Explore The Update Framework (TUF) for enhanced software signing and verification. Learn about its security features, integrations, and new developments for secure software distribution at scale.
Add to list
1 Lesons
26 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

No Keys? No Problem - Why You Can Trust Sigstore Signatures

0 rewiews
Explore Sigstore's keyless code signing, its security measures, and trust mechanisms. Learn how it protects software supply chains using open principles and robust infrastructure.
Add to list
18 Lesons
27 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

Achieving End-to-End Software Supply Chain Security with in-toto

0 rewiews
Explore in-toto's advancements in software supply chain security, including artifact tracking, attestation types, and integrations with CNCF projects for cloud-native identity protection.
Add to list
1 Lesons
35 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

Building Sigstore Policies from Scratch

0 rewiews
Learn to create and implement Sigstore policies for secure software supply chains, enhancing your project's integrity and trust in the cloud-native ecosystem.
Add to list
1 Lesons
49 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

Life of a Sigstore Signature - Understanding Code Signing for Container Images

0 rewiews
Explore Sigstore's code signing process for Kubernetes images, including keyless signing, certificate authorities, and transparency logs. Learn to configure admission controllers for cluster security.
Add to list
1 Lesons
28 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

Sigstore for Python Packaging - Next Steps for Adoption

0 rewiews
Explore Sigstore integration in Python packaging, its benefits for users, and strategies for adoption. Learn about enhancing security in package publishing and consumption workflows.
Add to list
1 Lesons
25 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

The Road to SLSA4 - Applying the Sigstore Ecosystem in a Corporate Environment

0 rewiews
Explore Sigstore ecosystem implementation for software artifact integrity, covering self-hosting, keyless signatures, OIDC tokens, and verification methodologies in various environments.
Add to list
13 Lesons
32 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

Sigstore: Evolution and Future of Software Security Signing

0 rewiews
Explore Sigstore's journey in software security signing, its impact on Kubernetes, and future directions. Learn about supply chain security and cutting-edge cryptographic technologies.
Add to list
15 Lesons
40 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

Securing Content Repositories with The Update Framework (TUF)

0 rewiews
Explore secure content delivery using The Update Framework (TUF). Learn about protecting repositories, managing keys, and recovering from compromises. Discover recent developments and implementation updates.
Add to list
16 Lesons
22 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

SLSA FRSCA Recipe for Secure Supply Chain

0 rewiews
Explore an end-to-end solution for software supply chain security using OpenSSF-FRSCA, integrating tools like Tekton, Sigstore, and Kyverno to meet SLSA Level 3 requirements.
Add to list
1 Lesons
33 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

Verifying Software Signatures with TUF and Sigstore

0 rewiews
Explore secure software verification using TUF and Sigstore. Learn to design effective verification policies, understand signing limitations, and enhance security for open-source repositories and container registries.
Add to list
1 Lesons
36 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

So You Want to Run Your Own Sigstore - Recommendations for a Secure Setup

0 rewiews
Explore secure setups for private Sigstore instances, covering motivations, threat modeling, and operational requirements for enterprise artifact signing and verification.
Add to list
15 Lesons
33 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

How to Secure Your Supply Chain at Scale

0 rewiews
Learn how Yahoo secures its software supply chain using open-source tools like Grafeas, Sigstore, and Kyverno. Discover strategies for source code scanning, vulnerability management, and protecting Kubernetes deployments at scale.
Add to list
1 Lesons
40 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

Keyless Code Signing Without Fulcio

0 rewiews
Explore keyless code signing without Fulcio, understanding its benefits and implementing it with existing PKI solutions like Vault and stepca for hassle-free, secure software signing.
Add to list
1 Lesons
34 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

Growing SPIFFE and SPIRE in 2023 and Beyond - Secure Identity Management Progress

0 rewiews
Explore SPIFFE/SPIRE's latest advancements in secure identity management, including Windows support, SIGSTORE integration, and enhanced hardware security, empowering enterprises with robust infrastructure protection.
Add to list
1 Lesons
54 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

In-Toto: Attestations and Software Supply Chain Security

0 rewiews
Explore in-toto framework's advancements in software supply chain security, including attestation verification, type mapping, and integrations with CNCF projects and industry tools.
Add to list
1 Lesons
35 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

The Update Framework (TUF) Maintainer Panel: Integrations, Enhancements, and Supply Chain Security

0 rewiews
Panel discussion on The Update Framework: insights on integrations, supply chain security, and open-source project maintenance from TUF maintainers across various implementations and organizations.
Add to list
8 Lesons
40 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

Putting the Supply Chain Pieces Together: A Deep Dive into the Secure Software Factory

0 rewiews
Explore a deep dive into supply chain security, focusing on implementing CNCF's Secure Software Factory architecture using cloud-native tools to enhance software provenance and artifact trustworthiness.
Add to list
9 Lesons
20 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

Securing Your Container Native Supply Chain with SLSA, GitHub and Tekton

0 rewiews
Practical guide to securing container native supply chains using SLSA principles, in-toto attestations, and step-by-step demos for achieving SLSA Level 2 in Tekton and Github Actions.
Add to list
1 Lesons
32 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

Enforcing Supply Chain Security and Simplifying Compliance Audit for ArgoCD Deployments

0 rewiews
Explore techniques for securing supply chains and simplifying compliance audits in ArgoCD deployments using open-source tools like Guac, Sigstore, and in-toto.
Add to list
1 Lesons
20 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

Identity-based Source Integrity with Gitsign

0 rewiews
Explore Gitsign, a Sigstore project for keyless, identity-based Git commit signing. Learn its benefits over traditional methods and how it enhances security in CI/CD and GitOps workflows.
Add to list
1 Lesons
29 minutes
On-Demand
Free-Video
Linux Foundation

Growing the Chain: Trusting Build Provenance from Userspace

0 rewiews
Explore techniques for establishing trust in CI/CD workflows, focusing on artifact signing, provenance generation, and building a chain of trust using open-source technologies like Sigstore and OIDC.
Add to list
1 Lesons
33 minutes
On-Demand
Free-Video
Rawkode Academy

Hands-on Introduction to Sigstore - Securing the Software Supply Chain

0 rewiews
Comprehensive introduction to sigstore, covering container image signing, keyless mode, transparency logs, and image policy enforcement with Kyverno for enhanced software supply chain security.
Add to list
7 Lesons
1 hour 8 minutes
On-Demand
Free-Video
Kubesimplify

Supply Chain Security - The First Steps

0 rewiews
Explore supply chain security essentials, including zero trust, SBOMs, and sigstore. Learn to generate and utilize SBOMs to enhance software development security and meet compliance requirements.
Add to list
1 Lesons
20 minutes
On-Demand
Free-Video
DevConf

An Introduction to Sigstore for Pythonistas

0 rewiews
Explore Sigstore for securing Python projects: learn to sign, verify, and protect software artifacts, addressing supply chain vulnerabilities with accessible tracing methods.
Add to list
1 Lesons
35 minutes
On-Demand
Free-Video
Linux Foundation

The Road to Zero CVEs: People and Technology

0 rewiews
Explore open source software vulnerabilities, supply chain security legislation, and emerging tools like Sigstore to fortify digital ecosystems and manage CVEs effectively.
Add to list
1 Lesons
36 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

Navigating the Software Supply Chain Defense Landscape

0 rewiews
Explore software supply chain security tools and frameworks, their integration, and how to select the right combination for comprehensive protection against rising cyber threats.
Add to list
1 Lesons
23 minutes
On-Demand
Free-Video
OpenSSF

Leveraging Sigstore Capabilities in a Local Environment

0 rewiews
Explore Lockheed Martin's integration of Sigstore for secure, auditable software development. Learn about internal Kubernetes deployments, certificate authorities, and streamlined GitLab pipelines for enhanced security.
Add to list
1 Lesons
13 minutes
On-Demand
Free-Video
OpenSSF

Sigstore: 2024 and Beyond

0 rewiews
Explore Sigstore's achievements, future roadmap, and vision for securing open source software. Learn about upcoming milestones and opportunities to contribute to this de-facto signing solution.
Add to list
1 Lesons
14 minutes
On-Demand
Free-Video
OpenSSF

Sigstore: Using Transparent Digital Signatures to Help Secure the Software Supply Chain

0 rewiews
Explore transparent digital signatures with Sigstore to enhance software supply chain security. Learn key techniques for protecting open source ecosystems.
Add to list
1 Lesons
27 minutes
On-Demand
Free-Video
Docker

Supply Chain Security in the Enterprise

0 rewiews
Explore open source solutions for enterprise software supply chain security, focusing on Sigstore and Archivista to enhance accountability and transparency in software development.
Add to list
1 Lesons
26 minutes
On-Demand
Free-Video
Linux Foundation

Managing Supply Chain Risk in a World of AI-Assisted Developers

0 rewiews
Explore strategies for mitigating security risks associated with AI coding assistants, focusing on safe code integration and leveraging open-source tools to enhance software supply chain security.
Add to list
1 Lesons
15 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

Navigating the Intersection: AI's Role in Shaping the Secure Open Source Software Ecosystem

0 rewiews
Explore AI's impact on open-source software security, covering OSS in AI systems, open-sourcing AI components, AI-driven security automation, and AI's evolving role in OSS development and usage.
Add to list
1 Lesons
17 minutes
On-Demand
Free-Video
OpenSSF

Eating the Open Source Security Sandwich with Skootrs

0 rewiews
Explore Skootrs, an open-source tool simplifying adoption of security practices for software developers through automation and guardrails.
Add to list
1 Lesons
19 minutes
On-Demand
Free-Video
OpenSSF

A Beginner's View of Public Instances

0 rewiews
Explore OpenSSF's public instances: hosting, scale, security, and usage guidelines. Gain insights into tools for safer software development and protection against attackers.
Add to list
1 Lesons
14 minutes
On-Demand
Free-Video
OpenSSF

Getting Involved in Sigstore Research Projects

0 rewiews
Explore Sigstore's research opportunities in privacy-conscious transparency, stronger verification assurances, and distributed trust timestamping. Learn how to contribute to this open-source project.
Add to list
1 Lesons
11 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

Navigating the Intersection: AI's Role in Shaping the Secure Open Source Software Ecosystem

0 rewiews
Explore AI's impact on open-source software security, covering OSS in AI systems, open-sourcing AI components, AI-driven security automation, and AI's evolving role in OSS development.
Add to list
1 Lesons
21 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

Sigstore: Past, Present and Future Directions

0 rewiews
Explore Sigstore's journey, impact on OSS code signing, and future plans. Learn about its adoption by major projects and integration efforts with package managers.
Add to list
1 Lesons
36 minutes
On-Demand
Free-Video
OpenSSF

Sigstore: Using Transparent Digital Signatures to Help Secure the Software Supply Chain

0 rewiews
Explore transparent digital signatures with Sigstore to enhance software supply chain security and learn practical implementation strategies.
Add to list
1 Lesons
20 minutes
On-Demand
Free-Video
DevConf

Implementing DevSecOps in Production with Stackrox and Tekton

0 rewiews
Implement robust DevSecOps pipelines using Stackrox and Tekton. Eliminate security risks, secure the software supply chain, and provide automated guardrails for developers.
Add to list
1 Lesons
29 minutes
On-Demand
Free-Video
OpenSSF

Enforcing Organization Policies with Enterprise Contract

0 rewiews
Learn to enforce organizational policies on container images using Enterprise Contract, leveraging Sigstore signatures and in-toto attestations within the Tekton ecosystem.
Add to list
1 Lesons
21 minutes
On-Demand
Free-Video
Drupal Association

Secure Software Supply Chain: Current State in PHP and Drupal Ecosystem

0 rewiews
Explore the secure software supply chain, recent global events, and tools for digital signatures, SBOM generation, and vulnerability scanning in PHP and Drupal projects.
Add to list
1 Lesons
37 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

Protect the Pipe - A Policy-based Approach for Securing CI/CD Pipelines

0 rewiews
Explore a cloud-native security framework for CI/CD pipelines using in-toto, Kyverno, and sigstore. Learn to implement policy-based controls and address unique security challenges in modern application delivery.
Add to list
1 Lesons
26 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

Verifiable Build Environments in the Cloud - Powered by Sigstore and Enclaves

0 rewiews
Explore how Sigstore enhances confidential computing security, minimizing trusted compute base while maintaining engineering velocity. Learn about cloud-based verifiable build environments.
Add to list
1 Lesons
17 minutes
On-Demand
Free-Video
Linux Foundation

Securing the npm Ecosystem - Enhancing Trust in Open Source

0 rewiews
Learn about GitHub's efforts to secure the npm ecosystem, including 2FA, Sigstore, and other measures to protect open source dependencies and prevent account takeovers.
Add to list
25 Lesons
23 minutes
On-Demand
Free-Video
Linux Foundation

Secure Python Packaging and Release Using Continuous Deployment

0 rewiews
Learn to securely package and release Python projects using continuous deployment, covering security improvements, build reproducibility, automated PyPI deployment, and release signing with Sigstore.
Add to list
1 Lesons
1 hour 21 minutes
On-Demand
Free-Video
Linux Foundation

Open Source Security and Supply Chain Innovations - Keynote Sessions

0 rewiews
Explore cutting-edge topics in open source security, including supply chain protection, Sigstore, SPDX, eBPF, SLSA, and memory safety, presented by industry leaders and experts.
Add to list
1 Lesons
1 hour 57 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

Securing GitOps Supply Chain with Sigstore and Kyverno

0 rewiews
Learn to secure GitOps supply chain by signing and verifying container images using Sigstore and Kyverno, eliminating security risks and ensuring only trusted images are deployed in Kubernetes clusters.
Add to list
1 Lesons
26 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

Securing Kubernetes Manifests with Sigstore and Kyverno

0 rewiews
Learn to secure Kubernetes resources using Sigstore for signing YAML definitions and Kyverno for verification during admission controls, with real-world use cases for tamper-prevention and approval workflows.
Add to list
1 Lesons
22 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

Building Images for the Secure Supply Chain

0 rewiews
Techniques and tools for building secure container images, including distroless philosophy, updating dependencies, using apko for reproducibility, and signing with Sigstore.
Add to list
1 Lesons
28 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

Trust But Verify: Bringing Supply Chain Integrity to CD GitOps

0 rewiews
Explore how to enhance CD GitOps with supply chain controls, ensuring integrity and tamper-proof deployments through keyless signing, transparency logs, and cluster enforcement of signatures and policies.
Add to list
1 Lesons
34 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

CRI-O's Senior Year - Overview and New Developments

0 rewiews
Explore CRI-O's journey towards CNCF graduation, including new developments like conmon-rs, sigstore integration, and Kubernetes alignment for enhanced container runtime stability and security.
Add to list
1 Lesons
40 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

Who's Verifying Your Signatures? Approaching Private Container Image Signing

0 rewiews
Explore container image signing for private use, comparing open-source and internal challenges. Learn about leading frameworks and their scalability for secure software delivery.
Add to list
15 Lesons
26 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

Sigstore - How We Learned to Stop Trusting Registries and Love Signatures

0 rewiews
Explore InfluxData's journey in implementing container image signing for their SaaS offering, covering the process, challenges, and technical details from DevOps and security perspectives.
Add to list
1 Lesons
22 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

Securing the IaC Supply Chain

0 rewiews
Explore securing Infrastructure as Code supply chains, applying software security principles to IaC pipelines. Learn about Crossplane's integration with Sigstore for enhanced provenance and attestations.
Add to list
1 Lesons
21 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

Zero Trust Workload Identity in Kubernetes

0 rewiews
Explore Zero Trust principles in Kubernetes using SIFFE and Spire for workload identity-based authorization, eliminating the need for secrets and enhancing security across service meshes.
Add to list
1 Lesons
37 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

Spicing up Container Image Security with SLSA and GUAC

0 rewiews
Explore SLSA and GUAC tools to enhance container image security, verify build provenance, and understand artifact composition for safer deployments in production environments.
Add to list
1 Lesons
36 minutes
On-Demand
Free-Video
Linux Foundation

Enforcing a Secure Supply Chain on Kubernetes

0 rewiews
Explore implementing and enforcing a secure supply chain in Kubernetes using open-source projects, including Sigstore keyless workflow and signature verification policies.
Add to list
1 Lesons
40 minutes
On-Demand
Free-Video
Linux Foundation

Securing Your Infrastructure as Code Pipeline

0 rewiews
Explore techniques for securing Infrastructure as Code pipelines, including static analysis, RBAC, and open-source tools like Open Policy Agent and Sigstore, to enhance productivity and compliance.
Add to list
1 Lesons
33 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

CRI-O's Graduation Celebration - Container Runtime Interface Overview and Future Plans

0 rewiews
Explore CRI-O's CNCF graduation, architecture, and recent enhancements. Learn about its role as a stable, pluggable container runtime for Kubernetes and future project plans.
Add to list
1 Lesons
34 minutes
On-Demand
Free-Video
Linux Foundation

Open Tools for Secure Supply Chains in Kubernetes - From Release Engineering

0 rewiews
Explore open-source tools for secure software supply chains, focusing on Kubernetes' journey to SLSA Level 3 compliance and how other projects can leverage these tools for enhanced security.
Add to list
10 Lesons
35 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

Demystify Modern Signing: Keys, Certificates, and Envelopes

0 rewiews
Explore practical aspects of cryptographic signing tools, covering key algorithms, signing envelopes, certificates, and verification, with a focus on identity-based signing using short-lived keys.
Add to list
1 Lesons
33 minutes
On-Demand
Free-Video
Black Hat

NPM and Sigstore - Provenance Comes to the World's Largest OSS Ecosystem

0 rewiews
Explore GitHub's efforts to secure the Javascript ecosystem through provenance integration and Sigstore partnership, enhancing npm's security against malware and supply chain attacks.
Add to list
1 Lesons
39 minutes
On-Demand
Free-Video
NDC Conferences

SLSA, SigStore, SBOM & Software Supply Chain Security - What Does It All Mean?

0 rewiews
Demystifying software supply chain security: SLSA, SigStore, and SBOM explained. Learn about tools and methodologies to secure software from development to production in this comprehensive overview.
Add to list
1 Lesons
43 minutes
On-Demand
Free-Video
PyCon US

Securing the Open Source Software Supply Chain

0 rewiews
Explore tools and best practices for securing the open-source software supply chain, addressing vulnerabilities, and enhancing trust in the ecosystem. Learn about recent developments and future improvements.
Add to list
39 Lesons
30 minutes
On-Demand
Free-Video
PyCon US

Ergonomic Codesigning for the Python Ecosystem with Sigstore

0 rewiews
Explore Sigstore's integration into Python packaging, covering cryptographic fundamentals, security models, and the benefits of codesigning without long-term key material for developers and users.
Add to list
10 Lesons
29 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

Cloud Native Supply Chain Security with Tekton and Sigstore

0 rewiews
Hands-on overview of creating a secure zero-trust supply chain on Kubernetes using Tekton, Tekton Chains, and sigstore. Learn to protect pipelines, generate provenance, and integrate with In-Toto and SPIRE.
Add to list
1 Lesons
22 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

State of the Art Supply Chain Security - In-toto, TUF, and SigStore

0 rewiews
Explore cutting-edge supply chain security with in-toto, TUF, and SigStore. Learn how these tools create a transparent, hack-proof system to protect software from developer to end-user.
Add to list
6 Lesons
32 minutes
On-Demand
Free-Video
OpenSSF

Trojan Model Hubs: Hacking the ML Supply Chain and Defending Against Model Serialization Attacks

0 rewiews
Discover essential strategies for protecting ML systems from supply chain attacks, focusing on model scanning and cryptographic signing to defend against Model Serialization Attacks in public model hubs.
Add to list
1 Lesons
27 minutes
On-Demand
Free-Video
OpenSSF

From Cosign to an Ecosystem - The Evolution of Sigstore

0 rewiews
Explore the evolution of Sigstore's software security ecosystem, from its core components to advanced integrations for package managers, CI workflows, and policy enforcement tools.
Add to list
1 Lesons
29 minutes
On-Demand
Free-Video
Cloud Security Alliance

Trojan Model Hubs - Hacking the ML Supply Chain and Defending Against Security Threats

0 rewiews
Discover essential security strategies for ML model hubs, focusing on detecting Model Serialization Attacks and implementing cryptographic signing to protect against compromised artifacts and system vulnerabilities.
Add to list
1 Lesons
26 minutes
On-Demand
Free-Video
OpenSSF

Exploring Essential Security Checks for Open Source Go Projects

0 rewiews
Discover essential security tools for Go projects: gosec, govulncheck, and sigstore/cosign. Learn to enhance code security, scan vulnerabilities, and secure the supply chain.
Add to list
1 Lesons
25 minutes
On-Demand
Free-Video
OpenSSF

Protecting Kubernetes Resource Manifests in End-to-End Software Development Lifecycle

0 rewiews
Secure Kubernetes manifests throughout the software development lifecycle. Learn about integrity protection, signing techniques, and end-to-end supply chain security.
Add to list
13 Lesons
14 minutes
On-Demand
Free-Video
OpenSSF

Fuzzing Rekor for Bugs and Vulnerabilities

0 rewiews
Explore fuzzing techniques for Rekor, Sigstore's transparency log. Learn about challenges, artifact types, and results from months of testing. Gain insights on third-party security research approaches.
Add to list
1 Lesons
12 minutes
On-Demand
Free-Video
OpenSSF

Trusted Publishing: Lessons from PyPI

0 rewiews
Explore PyPI's trusted publishing scheme, its OpenID Connect-based authentication, and implementation details. Learn about security improvements and potential applications for other package indices.
Add to list
1 Lesons
24 minutes
On-Demand
Free-Video
Devoxx

Protecting the World's Greatest Open Source Ecosystem with Sigstore

0 rewiews
Explore Sigstore, an OpenSSF project enhancing software supply chain security. Learn to sign and verify Maven Central artifacts, protecting against malicious attacks and ensuring dependency trust.
Add to list
1 Lesons
50 minutes
On-Demand
Free-Video
Devoxx

PGP vs Sigstore - The Match at Maven Central

0 rewiews
Exploring sigstore as an alternative to PGP for signing and verifying Maven Central artifacts, promising easier key management and improved software supply chain security.
Add to list
1 Lesons
51 minutes
On-Demand
Free-Video
OpenSSF

PEP 740 and PyPI - Bootstrapping Provenance for the Python Ecosystem

0 rewiews
Explore how PEP 740 enhances PyPI's security through digital attestations, integrating with Sigstore and SLSA to provide robust package provenance without complex key management.
Add to list
1 Lesons
31 minutes
On-Demand
Free-Video
Eclipse Foundation

Open Source Software Supply Chain Security - Understanding Threats and Best Practices

0 rewiews
Explore critical threats to open source software supply chains, industry best practices for security, and practical strategies for protecting against vulnerabilities and cyberattacks.
Add to list
1 Lesons
39 minutes
On-Demand
Free-Video
GoLab conference

Essential Security Checks for Your Go Project

0 rewiews
Implement essential security checks in Go projects using open-source tools like gosec, govulncheck, and sigstore/cosign. Learn to integrate code analysis, vulnerability scanning, and supply chain security.
Add to list
1 Lesons
45 minutes
On-Demand
Free-Video
Linux Foundation

Securing Your Supply Chain with an Open Source Ecosystem

0 rewiews
Explore open-source tools and best practices for securing software supply chains across creation, build, deployment, and runtime stages. Learn to leverage automation and DevSecOps to reduce vulnerabilities.
Add to list
1 Lesons
41 minutes
On-Demand
Free-Video
Devoxx

Practical Guides for Enhancing Your Software Supply Chain Security

0 rewiews
Practical guide to fortify software supply chain security using open-source tools. Covers building, packaging, dependencies, code scanning, and establishing trust across the delivery process.
Add to list
1 Lesons
35 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

CRI-O Features for Fun and Profit - Advanced Kubernetes Container Runtime Capabilities

0 rewiews
Discover cutting-edge CRI-O and Kubernetes features, from sigstore signature support to Podman pod integration and OCI artifacts, designed for cluster admins seeking advanced container runtime capabilities.
Add to list
1 Lesons
29 minutes
On-Demand
Free-Video
All Things Open

Community-centric Approaches to Securing AI-generated Code

0 rewiews
Explore community-driven strategies for securing AI-generated code, focusing on proof of origin, safe mergeability, and protecting against security risks in AI coding assistants.
Add to list
1 Lesons
12 minutes
On-Demand
Free-Video