Главная
Study mode:
on
You
History
Saved
In progress 0 courses
compleat 0 courses
#Art & Design #Adobe #ChatGPT #GitHub

#in-toto

Showing: 27 courses
CNCF [Cloud Native Computing Foundation]

Securing the Supply Chain: A Practical Guide to SLSA Compliance from Build to Runtime

0 rewiews
Dive into SLSA compliance for supply chain security using CNCF tools. Explore GitHub Actions, Cosign, Kyverno, in-toto, and Kubescape to secure software from build to runtime in Kubernetes ecosystems.
Add to list
1 Lesons
33 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

In-Toto: Protecting Software Supply Chain in Cloud Native and Confidential Containers

0 rewiews
探讨In-toto项目如何保护软件供应链完整性,以及在Confidential Containers等云原生应用中的应用,展示其在提供可信元数据和验证供应链步骤方面的优势。
Add to list
1 Lesons
40 minutes
On-Demand
Free-Video
Linux Foundation

Toto-Ally TUF: Simple Tools for a Secure Software Supply Chain

0 rewiews
Learn to secure software supply chains using in-toto and TUF frameworks. Explore their integration, real-world applications, and new open-source tools for enhanced protection against cyber threats.
Add to list
1 Lesons
35 minutes
On-Demand
Free-Video
Linux Foundation

Software Supply Chain Security Case Study at Anaconda

0 rewiews
Explore real-world experiences in securing a large-scale open-source packaging pipeline, addressing challenges, implementing solutions, and achieving positive outcomes using respected security designs.
Add to list
1 Lesons
43 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

Notary: State of Development and Supply Chain Security

0 rewiews
Explore supply chain security with Notary project overview, Notary v2 updates, and ecosystem context. Learn about TUF and in-toto projects and their role in achieving security outcomes.
Add to list
1 Lesons
37 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

Achieving End-to-End Software Supply Chain Security with in-toto

0 rewiews
Explore in-toto's advancements in software supply chain security, including artifact tracking, attestation types, and integrations with CNCF projects for cloud-native identity protection.
Add to list
1 Lesons
35 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

Verifying Software Signatures with TUF and Sigstore

0 rewiews
Explore secure software verification using TUF and Sigstore. Learn to design effective verification policies, understand signing limitations, and enhance security for open-source repositories and container registries.
Add to list
1 Lesons
36 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

In-Toto: Attestations and Software Supply Chain Security

0 rewiews
Explore in-toto framework's advancements in software supply chain security, including attestation verification, type mapping, and integrations with CNCF projects and industry tools.
Add to list
1 Lesons
35 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

Securing Your Container Native Supply Chain with SLSA, GitHub and Tekton

0 rewiews
Practical guide to securing container native supply chains using SLSA principles, in-toto attestations, and step-by-step demos for achieving SLSA Level 2 in Tekton and Github Actions.
Add to list
1 Lesons
32 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

Enforcing Supply Chain Security and Simplifying Compliance Audit for ArgoCD Deployments

0 rewiews
Explore techniques for securing supply chains and simplifying compliance audits in ArgoCD deployments using open-source tools like Guac, Sigstore, and in-toto.
Add to list
1 Lesons
20 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

Securing the Supply Chain: A Practical Guide to SLSA Compliance from Build to Runtime

0 rewiews
Practical guide to securing software supply chain using CNCF tools. Covers SLSA compliance, GitHub Actions, Cosign, Kyverno, in-toto, and Kubescape for build-to-runtime security in Kubernetes ecosystems.
Add to list
1 Lesons
34 minutes
On-Demand
Free-Video
Linux Foundation

The Road to Zero CVEs: People and Technology

0 rewiews
Explore open source software vulnerabilities, supply chain security legislation, and emerging tools like Sigstore to fortify digital ecosystems and manage CVEs effectively.
Add to list
1 Lesons
36 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

Navigating the Software Supply Chain Defense Landscape

0 rewiews
Explore software supply chain security tools and frameworks, their integration, and how to select the right combination for comprehensive protection against rising cyber threats.
Add to list
1 Lesons
23 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

Protect the Pipe - A Policy-based Approach for Securing CI/CD Pipelines

0 rewiews
Explore a cloud-native security framework for CI/CD pipelines using in-toto, Kyverno, and sigstore. Learn to implement policy-based controls and address unique security challenges in modern application delivery.
Add to list
1 Lesons
26 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

Cloud Native Supply Chain Security: Beyond SBOMs - Perspectives and Practices

0 rewiews
Insights on cloud native supply chain security beyond SBOMs. Experts discuss straightforward approaches, simple security practices, and future perspectives using open-source tools and frameworks.
Add to list
1 Lesons
35 minutes
On-Demand
Free-Video
Docker

Container Security: Supply Chain, Authorization, and Runtime Protection

0 rewiews
Explore container security: supply chain integrity, deployment authorization, and runtime protection. Experts discuss in-toto, TUF, Open Policy Agent, and container escape prevention.
Add to list
1 Lesons
1 hour 15 minutes
On-Demand
Free-Video
Linux Foundation

Securing Your Infrastructure as Code Pipeline

0 rewiews
Explore techniques for securing Infrastructure as Code pipelines, including static analysis, RBAC, and open-source tools like Open Policy Agent and Sigstore, to enhance productivity and compliance.
Add to list
1 Lesons
33 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

Kubernetes Supply Chain Security - Building a Secure Software Factory

0 rewiews
Explore Kubernetes supply chain security, software factory approaches, and defense strategies against attacks. Learn about signing, verification, and lessons from SUNBURST to enhance cloud-native security.
Add to list
21 Lesons
36 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

Demystify Modern Signing: Keys, Certificates, and Envelopes

0 rewiews
Explore practical aspects of cryptographic signing tools, covering key algorithms, signing envelopes, certificates, and verification, with a focus on identity-based signing using short-lived keys.
Add to list
1 Lesons
33 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

Securing the Software Supply Chain with the In-toto and SPIRE Projects

0 rewiews
Explore securing software supply chains using in-toto and SPIRE projects. Learn about cryptographic attestation, automated certificate issuance, and building trust in software releases.
Add to list
9 Lesons
20 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

In-toto - Securing the Entire Software Supply Chain

0 rewiews
Explore in-toto's protocol for verifiably defining and securing software supply chain steps, enhancing security guarantees for cloud-native and other ecosystems.
Add to list
1 Lesons
19 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

Cloud Native Supply Chain Security with Tekton and Sigstore

0 rewiews
Hands-on overview of creating a secure zero-trust supply chain on Kubernetes using Tekton, Tekton Chains, and sigstore. Learn to protect pipelines, generate provenance, and integrate with In-Toto and SPIRE.
Add to list
1 Lesons
22 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

State of the Art Supply Chain Security - In-toto, TUF, and SigStore

0 rewiews
Explore cutting-edge supply chain security with in-toto, TUF, and SigStore. Learn how these tools create a transparent, hack-proof system to protect software from developer to end-user.
Add to list
6 Lesons
32 minutes
On-Demand
Free-Video
OpenSSF

PEP 740 and PyPI - Bootstrapping Provenance for the Python Ecosystem

0 rewiews
Explore how PEP 740 enhances PyPI's security through digital attestations, integrating with Sigstore and SLSA to provide robust package provenance without complex key management.
Add to list
1 Lesons
31 minutes
On-Demand
Free-Video
Linux Foundation

A Step Closer to Secure Development: Using in-Toto and OPA Gatekeeper to Verify Artifact Integrity

0 rewiews
Explore securing software supply chains using in-toto, Witness, Archivista, and OPA Gatekeeper. Learn to verify artifact integrity from development to Kubernetes deployment.
Add to list
1 Lesons
45 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

Secure Release Processes with in-Toto Policy Verification

0 rewiews
Discover how to enforce secure software release processes using in-toto's policy verification system, covering attestations, SDLC compliance, and build provenance for enhanced security measures.
Add to list
1 Lesons
33 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

Practical Supply Chain Security: Implementing SLSA Compliance from Build to Runtime

0 rewiews
Discover practical strategies for implementing SLSA compliance, from using GitHub Actions and Cosign for artifact signing to enforcing runtime policies with Kyverno and securing keys with HSMs.
Add to list
1 Lesons
32 minutes
On-Demand
Free-Video