Growing SPIFFE and SPIRE in 2023 and Beyond - Secure Identity Management Progress
Explore SPIFFE/SPIRE's latest advancements in secure identity management, including Windows support, SIGSTORE integration, and enhanced hardware security, empowering enterprises with robust infrastructure protection.
Secure Your Project with the SIG Release Supply Chain Kit
Explore tools for enhancing supply chain security in open-source projects, including SBOMs, signed attestations, and secure release pages. Learn how to implement these features using reusable GitHub actions.
Attacking and Defending Kubernetes TEE Enclaves in Critical Infrastructure
Explore Kubernetes TEE enclaves for critical infrastructure security. Learn attack and defense strategies, threat modeling, and compliance benefits for various regulations.
Removing Language Barriers for Spanish-speaking Professionals
Descubre cómo el equipo de documentación en español de Kubernetes está eliminando barreras lingüísticas y aprende a contribuir en la traducción de documentos de CNCF para profesionales hispanohablantes.
Secure Kubernetes Supply Chain: Lessons and Tools for Project Releases
Explore Kubernetes' enhanced security features for software supply chain, including SBOMs, provenance attestations, and digital signatures. Learn to implement these tools in your projects.
Enhancing Data Protection Workflows with Kanister and Argo Workflows
Explore advanced data protection strategies using Kanister and Argo workflows for enhanced cloud-native security and efficient backup processes.
Using Argo Project to Secure Elastic - InfoSec Team's Journey
Discover how Elastic's InfoSec team leverages Argo Project tools for efficient K8s cluster management, GitOps-driven workflows, and seamless deployment of security use-cases in cloud environments.
How to Protect Your Cloud-Native Data - A Beginner's Guide
Learn essential strategies for safeguarding cloud-native data, exploring Kubernetes volumes, CSI drivers, and advanced capabilities to ensure robust protection in modern environments.
CTF Overview and Experience - Preparing for SecurityCon
Prepare for SecurityCon's CTF event with a warm-up session covering container breakouts and Kubernetes misconfigurations. Suitable for all experience levels, learn CTF engagement techniques.
First Steps to Full Lifecycle Security with Open Source Tools
Hands-on workshop demonstrating installation, configuration, and customization of open-source security tools for DevOps, focusing on Trivy for container and infrastructure security and Starboard for continuous security assurance.
Cloud Native - Protecting Software Supply Chains Using Kyverno
Explore Kyverno's role in safeguarding software supply chains, enhancing security practices, and ensuring compliance in cloud-native environments.
Putting the Supply Chain Pieces Together: A Deep Dive into the Secure Software Factory
Explore a deep dive into supply chain security, focusing on implementing CNCF's Secure Software Factory architecture using cloud-native tools to enhance software provenance and artifact trustworthiness.
Towards the Cloud Native Telco: Learning from the Trenches
Insights on cloud-native transformation in telecom, focusing on Kubernetes deployment for 5G Core platforms and addressing key improvement areas for reliable service delivery.
Dissecting the 0-Day Supply Chain Vulnerability in Argo CD
Explore the discovery and implications of a critical 0-day vulnerability in Argo CD, including attack methods, remediation steps, and its impact on the ecosystem.
Securing Web Services with Let's Encrypt and Cert Manager
Automate SSL/TLS certificate management for web services using Let's Encrypt and Cert Manager, enhancing security and simplifying deployment in cloud-native environments.
Securing Shopify's Software Supply Chain - Mitigating Supply Chain Attacks
Explore techniques for securing software supply chains, including cloud-based defenses, trust establishment, and malicious behavior detection, drawing from Shopify's experiences.
Introduction to Zero Trust Networking and Infrastructure Access with Twingate
Explore Zero Trust Networking and secure infrastructure access with Twingate. Learn why VPNs fall short for IaC and discover innovative solutions for DevOps and IT teams, including Kubernetes integration.
Threat Model Report: Security Considerations for Hardening Declarative GitOps on Kubernetes with Argo CD
Explore security considerations for hardening Argo CD deployments in Kubernetes, focusing on mitigating misconfigurations and implementing best practices to enhance GitOps workflows.
Threat Model Report: Security Considerations for Hardening Declarative GitOps on Kubernetes with Argo CD
Explore security considerations for hardening Argo CD deployments in Kubernetes, focusing on mitigating misconfigurations and implementing best practices to enhance GitOps workflows.
Envoy Gateway End User Threat Model Report: Raising Awareness of Gateway API Security
Explore Envoy Gateway's security through a threat-driven analysis, providing insights for confident deployment as an edge proxy in Kubernetes clusters.
A Telco CNF Journey from Zero to Millions
Explore the challenges and solutions in deploying Telco-grade Cloud Native Functions on private Kubernetes clouds, focusing on operational, integration, and performance aspects.