Kicking Security Chain Attacks to the Curb with Kyverno and Notary in GitOps
使用Kyverno和Notary等CNCF项目建立容器镜像信任,验证资源,并在GitOps中实施以提高软件供应链安全性。展示如何应对现代Kubernetes部署中的安全挑战。
Securing the Software Supply Chain with TUF and Docker - Protecting Against Distribution Attacks
Explore secure software updates with TUF framework, focusing on key revocation, mitigating attacks, and integrating with Docker's Notary for enhanced software supply chain security.
Improve Vulnerability Management with OCI Artifacts - It Is That Easy
Learn to enhance vulnerability management using OCI artifacts. Discover how to efficiently utilize SBOMs, signed attestations, and open-source tools for improved supply chain security at scale.
TUF-En Up Your Signatures - Enhancing Software Distribution Security
Explore The Update Framework (TUF) for enhanced software signing and verification. Learn about its security features, integrations, and new developments for secure software distribution at scale.
Notary: State of Development and Supply Chain Security
Explore supply chain security with Notary project overview, Notary v2 updates, and ecosystem context. Learn about TUF and in-toto projects and their role in achieving security outcomes.
Power of AI: DevSecOps and Cloud Artifact Signing Explored - Sessions 1 and 2
Explore AI's impact on DevSecOps and cloud artifact signing. Learn how AI enhances security automation, vulnerability scanning, and threat detection. Discover tools for ensuring trust and integrity in cloud environments.
Using Docker Content Trust with Kubernetes Admission Controllers to Secure Runtime
Enhance container security by implementing image signing in CI/CD pipelines and restricting Kubernetes deployments to verified images using TUF/Notary and admission controllers.
Securing the Container Supply Chain with Notary, TUF, and Gatekeeper
Explore container supply chain security using Notary, TUF, and Gatekeeper. Learn digital signature techniques and see a demo on implementing secure CI/CD processes and policy enforcement in Kubernetes clusters.
Security Update: LinuxKit, Security Scanning, and Notary - Moby Summit
Explore cutting-edge container security with LinuxKit, security scanning, and Notary. Learn about orchestration security and advanced protection measures for containerized environments.
Notary v2 - Redesigning the Secure Supply Chain for Containers
Explore Notary v2's redesign for secure container supply chains, focusing on OCI registry-native protocols and improved ecosystem security based on community experience.
Beyond Signatures - Using TUF and Notary to Secure Software Distribution
Explore TUF and Notary for secure software distribution, focusing on protection against attacks, adapting TUF for Notary v2, and addressing unique registry ecosystem challenges.
A Safer Curl - Bash for the Cloud
Learn how to transform risky curl | bash installations into secure one-liners using Porter and Notary, making cloud-native application deployments safer without sacrificing convenience or ease of use.