
Análisis de vulnerabilidades en herramientas nativas de la nube, presentando resultados de auditorías de seguridad y ofreciendo recomendaciones para mejorar la seguridad en proyectos de código abierto.

Explore theoretical and practical approaches to data security in cloud environments, covering formal methods, secure languages, and container-based storage solutions for enhanced protection and reliability.

Learn strategies for implementing security best practices, managing dependencies, and balancing developer experience in open source communities, using tools like Renovate, Trivy, and Dependabot.

Discover strategies for implementing robust security in GitOps, covering access control, multi-tenant management, and best practices for securing critical components in automated deployment workflows.

Hands-on overview of creating a secure zero-trust supply chain on Kubernetes using Tekton, Tekton Chains, and sigstore. Learn to protect pipelines, generate provenance, and integrate with In-Toto and SPIRE.

SolarWinds' Project Trebuchet: Rebuilding secure software supply chain using CNCF and CDF projects after Sunburst hack. Insights on new build system, its necessity, and lessons learned from a major security breach.

Aprenda prácticas clave para mejorar la seguridad de la cadena de suministro de software, incluyendo auditoría, verificación y control de admisión, con perspectivas de la industria bancaria altamente regulada.

Explore digital signatures' true meaning, implications of key handling policies, and identity concepts in software supply chain security. Dive deep into cryptographic realities and case studies.

Explore the current landscape of Software Bill of Materials (SBOMs) with industry experts, discussing challenges, best practices, and future trends in software supply chain security.

Comprehensive introduction to DevSecOps, exploring software security scanning and scaling principles using Jenkins Templating Engine for shared, tool-agnostic pipelines across teams.

Explore cutting-edge supply chain security with in-toto, TUF, and SigStore. Learn how these tools create a transparent, hack-proof system to protect software from developer to end-user.

Explore SLSA methodology for preventing software supply chain tampering, illustrated through gremlin scenarios and demonstrating how SLSA controls raise attack costs and ensure security.

Explore SPIRE's role in securing machine-to-machine communication on Cray Shasta exascale supercomputers. Learn about critical communication requirements and why SPIRE is an ideal solution for this high-performance computing environment.

Explore automating certificate management for Kubernetes Webhooks using SPIRE, simplifying operations and integrating with the existing workload trust chain.

Explore SPIFFE identity integration with Cilium CNI, covering design challenges, extended use cases, and comparisons to other solutions for enhanced network security and policy enforcement.

Explore secure identity management for serverless workloads using SPIRE's SVIDStore plugin, enabling external storage and consumption of identities in environments where agent installation is not feasible.

Explore challenges and solutions for identity and access management in hybrid cloud native environments, focusing on achieving continuous identity assurance and zero trust.

Explore insights from four years of Emissary-ingress development, including challenges, lessons learned, and best practices for leveraging Envoy in Kubernetes environments.

Explore federated machine learning's principles, use-cases, and implementation using FATE and KubeFATE. Learn about challenges, opportunities, and integration with Kubeflow for real-world applications.

Explore security concerns and best practices for AI workloads on Kubernetes, covering user privileges, container isolation, package installation, and data access to ensure both security and productivity.

Explore building robust AI pipelines against adversarial attacks using Kubeflow and LFAI Adversarial Robustness Toolbox. Learn to test ML model robustness in production with Kubeflow Serving and KNative eventing.