Kubernetes Secrets Management with Secrets Store CSI Driver
Integrate enterprise-grade external secrets stores with Kubernetes using Secrets Store CSI Driver. Learn installation, configuration, and implementation with Vault for secure secret management.
Building Zero CVE Docker Images - Strategies and Solutions
Explore strategies for building zero-CVE Docker images, focusing on Chainguard images and discussing potential improvements in supply chain security. Includes resources for further learning.
Creating Zero-CVE Base Images for Dockerfiles
Create CVE-free base images for Dockerfiles using BuildSafe. Search and add required packages easily. Simplify the process of building secure artifacts with zero vulnerabilities.
Kubernetes HTTPS with Cert-Manager and Let's Encrypt
Explore HTTPS implementation in Kubernetes using cert-manager and Let's Encrypt. Learn about certificate authorities, self-signed certificates, and efficient approaches for securing your applications.
AI as an Enabler for Sustainability - Case Konecranes
Explore AI's role in sustainable logistics and supply chain management, focusing on reducing emissions, improving efficiency, and enhancing resilience and security.
OpenSSH's New Default: Ed25519 Keys - What You Need to Know
Explore OpenSSH's upgrade to Ed25519 keys, understanding its impact on your workflow and the basics of ssh-keygen in under 10 minutes.
Protecting Kubernetes Resource Manifests in End-to-End Software Development Lifecycle
Secure Kubernetes manifests throughout the software development lifecycle. Learn about integrity protection, signing techniques, and end-to-end supply chain security.
Activities in Japan and 10 Streams of OSS Security Mobilization Plan
Explore Japan's OSS security activities, SBOM adoption challenges, and potential certification uses in cloud services. Gain insights into unique industry perspectives and future preparedness.
Hardening the DevOps Pipeline with New Open-Source Security Tooling
Explore 5 phases of DevOps pipeline security using open-source tools. Learn about code signing, repo scanning, image SBOMs, OCI registries, pipeline audits, and evidence catalogs to enhance cybersecurity.
Fuzzing Rekor for Bugs and Vulnerabilities
Explore fuzzing techniques for Rekor, Sigstore's transparency log. Learn about challenges, artifact types, and results from months of testing. Gain insights on third-party security research approaches.
Better Build Pipelines with OpenSSF Projects - Enhancing Trust and Security
Enhance build pipeline security using OpenSSF projects: cosign, SBOMs, and SLSA. Demonstrate kpack for container image building on Kubernetes, integrating signed images and SBOM generation.
The Journey of the Node.js Permission Model
Explore the creation of Node.js Permission Model, uncovering motivations, challenges, and solutions. Gain insights into this experimental security feature and its impact on the ecosystem.
Embrace the Differences: Securing Open Source Ecosystems Where They Are
Explore efforts to fix the libwebp vulnerability in Python packages, examining interactions between security standards and open source ecosystems.
Compiler Options Hardening for C and C++
Explore compiler options to enhance C/C++ program security. Learn about memory-safety issues, mitigation techniques, and the OpenSSF Compiler Options Hardening Guide for informed decision-making.
SBOMs Everywhere - Work in Progress and Challenges Ahead
Explore the progress and challenges of Software Bill of Materials (SBOMs) implementation across industries with insights from a leading expert in dependable embedded systems.
Securing Open Source Supply Chains: Challenges and Solutions
Explore the importance of securing open source supply chains through automation, best practices, education, and collaboration in data centers and consumer applications.
SBOM Everywhere - Understanding Software Bill of Materials
Explore the importance of Software Bill of Materials (SBOM) in securing open source supply chains and learn about its widespread implementation.
What's New in the World of SBOMs?
Explore recent developments in Software Bill of Materials (SBOMs) with industry experts, discussing advancements, challenges, and best practices in software supply chain security.
We Make Python Safer Than Ever
Explore efforts to enhance Python's security, including PyPI audits, improved practices, and community involvement. Learn about challenges, progress, and future plans for a safer ecosystem.
Trusted Publishing: Lessons from PyPI
Explore PyPI's trusted publishing scheme, its OpenID Connect-based authentication, and implementation details. Learn about security improvements and potential applications for other package indices.
Large Language Models for Digital Foundational Identity
Explore large language models' potential in digital foundational identity systems, examining their applications and implications for identity verification and management.