In-Toto: Attestations and Software Supply Chain Security
Explore in-toto framework's advancements in software supply chain security, including attestation verification, type mapping, and integrations with CNCF projects and industry tools.
Enforcing Supply Chain Security and Simplifying Compliance Audit for ArgoCD Deployments
Explore techniques for securing supply chains and simplifying compliance audits in ArgoCD deployments using open-source tools like Guac, Sigstore, and in-toto.
A Mouthful of Mayhem: Taste Test and Gut Response to SLSA, GUAC, and Supply Chain Security
Explore popular supply chain security ingredients and learn how to combine them effectively to address threats in your organization's ecosystem.
Eliminating the Unknowns: Using GUAC to Better Understand Your Software Supply Chain
Learn how GUAC, an open-source knowledge graph, aggregates software supply chain metadata to enhance security, inform decision-making, and enable policy-driven admission control in your development lifecycle.
GUAC 101 - Introduction to Graph for Understanding Artifact Composition
Explore GUAC, a tool for generating software bills of materials (SBOMs) and vulnerability scanning in cloud-native environments, enhancing security and compliance.
Fresh SLSA and GUAC - Understanding Open Source Package Risks and Transparency
Explore open source package risks, transparency, and tools like GUAC, SLSA, and SBOMs to enhance software supply chain security and make informed decisions on dependencies.
Proactive Supply Chain Security with GUAC
Explore GUAC, a tool for proactive software supply chain security. Learn about its features, recent release, roadmap, and how to contribute to this OpenSSF project.
Cloud Native Security Landscape - Myths, Dragons, and Real Talk
Explore cloud-native security across the software lifecycle, from open-source creation to runtime threat detection. Learn about key projects, developer-security team collaboration, and separating real risks from myths.
Cloud Native Supply Chain Security: Beyond SBOMs - Perspectives and Practices
Insights on cloud native supply chain security beyond SBOMs. Experts discuss straightforward approaches, simple security practices, and future perspectives using open-source tools and frameworks.
Spicing up Container Image Security with SLSA and GUAC
Explore SLSA and GUAC tools to enhance container image security, verify build provenance, and understand artifact composition for safer deployments in production environments.
Software Supply Chain Security for Those in a Rush
Concise overview of software supply chain security concepts like SBOM, SLSA, and GUAC. Gain insights into emerging cybersecurity threats and their importance in the industry.
Understanding Software Component Analysis (SCA) in Plain Language
Gain insights into software supply chain security concepts like SBOM, VEX, and SLSA, demystifying their importance for protecting organizational assets and code integrity.
What Is Going On In Your Source Code? Understanding Software Component Analysis in Plain Language
Gain insights into software supply chain security concepts like SBOM, VEX, and SLSA, understanding their importance in protecting organizations from emerging security threats.
Improving Supply Chain Integrity with OpenSSF Technologies - Panel Discussion
Experts discuss OpenSSF technologies like SLSA, S2C2F, and GUAC, exploring their impact on open source security and software supply chain integrity. Learn about implementation and improving security posture.