GitHub-Azure Authentication and SLSA in DevOps
Explore GitHub Actions authentication for Azure and SLSA principles in DevSecOps. Learn passwordless methods, security levels, and contribute to open-source supply chain security projects.
Actions in the Wild: Usability and Ease of Use of Open Source Security Tools
Discover how to implement and optimize open-source security tools in software development, focusing on vulnerability analysis, CVE scoring, and automated GitHub security actions.
Dog Food Delight - Migrating Argo Workflows CI to Self-Hosted Infrastructure
Discover how to migrate CI pipelines from GitHub Actions to Argo Workflows, exploring challenges, solutions, and benefits of running Kubernetes-based CI systems with improved efficiency and reliability.
Practical Supply Chain Security: Implementing SLSA Compliance from Build to Runtime
Discover practical strategies for implementing SLSA compliance, from using GitHub Actions and Cosign for artifact signing to enforcing runtime policies with Kyverno and securing keys with HSMs.
Setting Up a Multi-Node Kafka Cluster for CI Testing
Master setting up and managing a lightweight multi-node Kafka cluster for CI/CD environments, enabling efficient development and testing of streaming applications with GitHub Actions.
Blue Team Tips for Using Scorecard in Security Automation
Discover how to leverage OpenSSF Scorecard and Allstar for automated security scanning of repositories, focusing on blue team strategies for securing first-party repos and implementing proactive security measures.