Build More Secure Apps with OWASP SKF and ASVS on Kubernetes
Enhance app security using OWASP SKF & ASVS on Kubernetes. Learn integration, manage ASVS requirements, and explore SKF Labs. Includes demo and GitHub repo for easy deployment on EC2 or AWS.
Scan, Patch, VEX - Using Open Source Tools to Manage Vulnerabilities in Containers
Learn to manage vulnerabilities in cloud-native environments using open-source tools like Trivy and Copacetic, and standards like VEX. Improve security across development, testing, and production.
How to Generate VEX Automatically for Your Project
Learn to automate VEX generation for Kubernetes workloads, reducing false positives in security scans and streamlining vulnerability management using Kubescape and a new GitHub Action.
BuildSafe Deep Dive - Getting Supply Chain Security Right Using Nix
Explore BuildSafe's capabilities for secure application builds using Nix, including package search, CVE information, and simplified development workflows.
Securing the Supply Chain: A Practical Guide to SLSA Compliance from Build to Runtime
Practical guide to securing software supply chain using CNCF tools. Covers SLSA compliance, GitHub Actions, Cosign, Kyverno, in-toto, and Kubescape for build-to-runtime security in Kubernetes ecosystems.
Enforceable Supply Chain Security Policy with OPA Gatekeeper and Ratify
Explore container supply chain security using OPA Gatekeeper and Ratify. Learn to enforce policies, verify images, and establish trust in deployments for a more secure container ecosystem.
Reproducible Builds with BuildKit for Software Supply Chain Security
Learn how BuildKit enables reproducible builds to enhance software supply chain security, ensuring verifiable and trustworthy Docker images through bit-for-bit identical reproduction from source code.
The 'S' in IoT Stands for Security - Securing Connected Devices
Explore IoT security challenges, recent breaches, and how containerization can enhance device protection. Learn best practices for building secure IoT devices and managing their lifecycle.
Safety vs Security: A Tale of Two Updates
Explore the tension between safety and security in product updates, focusing on embedded systems. Learn strategies to balance these conflicting needs in development and maintenance.
Leveraging Sigstore Capabilities in a Local Environment
Explore Lockheed Martin's integration of Sigstore for secure, auditable software development. Learn about internal Kubernetes deployments, certificate authorities, and streamlined GitLab pipelines for enhanced security.
Mastering Web Security - Myths, Strategies and Best Practices
Debunking web security myths and exploring effective defense strategies. Experts share practical tips, valuable resources, and emphasize organizational commitment for robust application security.
Driving the Need for Identity, Authentication, and Encryption in Containerized Environments
Explore encryption, identity verification, and workload attestation in multi-service environments. Learn to implement TLS with Istio and cert-manager for robust identity management and secure communication.
Hacking a Docker Container Registry
Explore techniques for compromising Docker container registries, uncovering vulnerabilities and potential security risks in containerized environments.
SLSA: A Security Paradigm for Software Supply Chain Integrity
Explore SLSA levels, software supply chain security basics, and tools like Cosign to enhance artifact integrity and benefit your organization.
Navigating the Quantum Readiness Journey: Securing Kubernetes with Quantum-Resistant Cryptography
Explore quantum-resistant cryptography for Kubernetes security. Hands-on insights into mTLS, x.509 certs, and container signing. Learn standardization progress and empower yourself to conduct tailored experiments.
One Port to Serve Them All - Google GCP Cloud Shell Abuse
Uncovers security vulnerabilities in GCP Cloud Shell, demonstrating how attackers can exploit a public-facing port to access internal services and bypass authentication, potentially leading to data leaks and network attacks.
Enforceable Supply Chain Security Policy with OPA Gatekeeper and Ratify
Enhance container supply chain security using OPA Gatekeeper and Ratify. Learn to enforce policies, verify images, and establish trust in deployments through practical demonstrations and safeguarding techniques.
Securing Python Projects Supply Chain
Explore best practices and tools for securing Python projects' supply chain, from development to distribution. Learn about cryptographic signatures, SBOMs, and SLSA attestations.
ROS on Fedora IoT - Containerized Deployment for Robotics
Streamline ROS deployment on Fedora IoT using bootable containers. Explore containerized approach, easy image building, and reliable upgrade mechanisms for robotics development.
Anchore Engine: DevSecOps Tool for Inspection, Analysis, and Certification of Infrastructure
Explore Anchore Engine for inspecting, analyzing, and certifying infrastructure, enhancing security in application development and QA processes.
DARCC - The 5 Layers of Modern App Security
Explore the DARCC layers of modern app security: Dependency, Access-Control, Runtime, Configuration, and Container. Learn best practices for securing your software supply chain and enforcing policies.