Secure Your GitOps - How to Implement a Robust Security Strategy
Discover strategies for implementing robust security in GitOps, covering access control, multi-tenant management, and best practices for securing critical components in automated deployment workflows.
GitOps in the Real World - Opportunities for Developer Experience Improvement
Explore GitOps implementation at scale, focusing on manifest generation and repository management. Learn from Chick-fil-A's experiences and discover opportunities to enhance the frontend process.
Building Flux's Multi-Tenant API with K8s User Impersonation
Explore Kubernetes multi-tenancy using Flux as an example. Learn RBAC, impersonation, and kubeConfig secrets to enable safe collaboration across namespaces and clusters.
A Multi-Cluster, Multi-Cloud Infrastructure with GitOps at CERN
Explore CERN's multi-cluster, multi-cloud infrastructure using GitOps. Learn about efficient management of distributed systems, cloud-native technologies, and standardized deployments across on-premises and public cloud environments.
A Day in the Life of the GitOps Platform Team
Explore State Farm's GitOps journey, scaling challenges, and continuous improvement strategies across cloud platforms, with insights on team dynamics and overcoming obstacles.
Cloud Native Supply Chain Security with Tekton and Sigstore
Hands-on overview of creating a secure zero-trust supply chain on Kubernetes using Tekton, Tekton Chains, and sigstore. Learn to protect pipelines, generate provenance, and integrate with In-Toto and SPIRE.
Project Trebuchet - How SolarWinds is Using Open Source to Secure Their Supply Chain in the Wake of the Sunburst Hack
SolarWinds' Project Trebuchet: Rebuilding secure software supply chain using CNCF and CDF projects after Sunburst hack. Insights on new build system, its necessity, and lessons learned from a major security breach.
Getting Started with Supply Chain Security is Easier Than You Think - Perspectives From a Highly Regulated Industry
Aprenda prácticas clave para mejorar la seguridad de la cadena de suministro de software, incluyendo auditoría, verificación y control de admisión, con perspectivas de la industria bancaria altamente regulada.
Whose Sign Is It Anyway?
Explore digital signatures' true meaning, implications of key handling policies, and identity concepts in software supply chain security. Dive deep into cryptographic realities and case studies.
The State of SBOMs
Explore the current landscape of Software Bill of Materials (SBOMs) with industry experts, discussing challenges, best practices, and future trends in software supply chain security.
Supply Chain Security with the Jenkins Templating Engine
Comprehensive introduction to DevSecOps, exploring software security scanning and scaling principles using Jenkins Templating Engine for shared, tool-agnostic pipelines across teams.
State of the Art Supply Chain Security - In-toto, TUF, and SigStore
Explore cutting-edge supply chain security with in-toto, TUF, and SigStore. Learn how these tools create a transparent, hack-proof system to protect software from developer to end-user.
Finding Your Way - A Survey of Supply Chains
Explore the open source supply chain landscape, essential tools, and challenges in software development, with a focus on SBOMs and security considerations.
An Overview on SLSA
Explore SLSA methodology for preventing software supply chain tampering, illustrated through gremlin scenarios and demonstrating how SLSA controls raise attack costs and ensure security.
Securing Edge Systems with TPM 2.0 and SPIRE
Explore TPM 2.0 and SPIRE for secure edge and hybrid systems. Learn about threat models, CI systems, and TPM policies. Includes demo and future work discussion.
Secure, Efficient API Plane Traversal for Compute Resources on Exascale Super Computers Using SPIRE
Explore SPIRE's role in securing machine-to-machine communication on Cray Shasta exascale supercomputers. Learn about critical communication requirements and why SPIRE is an ideal solution for this high-performance computing environment.
Managing Kubernetes Webhooks with SPIRE
Explore automating certificate management for Kubernetes Webhooks using SPIRE, simplifying operations and integrating with the existing workload trust chain.
Working Out SPIFFE Identity for Cilium CNI
Explore SPIFFE identity integration with Cilium CNI, covering design challenges, extended use cases, and comparisons to other solutions for enhanced network security and policy enforcement.
Supporting Confidential Workloads with SPIRE
Explore integrating confidential computing with SPIRE for enhanced workload protection. Learn challenges, benefits, and implementation strategies for secure attestation and trusted execution environments.
SPIRE Project Updates
Discover the latest developments in the SPIRE project with Ryan Turner from Uber Technologies, exploring advancements in cloud-native identity and access management.
Providing Identities to Serverless Workloads
Explore secure identity management for serverless workloads using SPIRE's SVIDStore plugin, enabling external storage and consumption of identities in environments where agent installation is not feasible.