Kubernetes Community Days: Impact, Organization, and Benefits
Discover the impact of Kubernetes Community Days, learn how to organize successful events, and explore ways to contribute to the cloud native community without coding.
A Holistic Approach to Managing Cyber Assets and Extending Security Posture
Explore holistic cyber asset management and enhance your security posture in this insightful presentation on modern cybersecurity strategies.
SBOMs, VEX, and Kubernetes - Software Supply Chain Security in Cloud Native Environments
Explore software supply chain security with experts discussing SBOMs, VEX, and their practical applications in Kubernetes environments, from open-source projects to regulated industries.
Handling JWTs: Understanding Common Pitfalls
Explore JWT authentication, common pitfalls, and security best practices. Learn about JWT structure, verification, and protection against attacks like algorithm confusion and secret brute-forcing.
Growing SPIFFE and SPIRE in 2023 and Beyond - Secure Identity Management Progress
Explore SPIFFE/SPIRE's latest advancements in secure identity management, including Windows support, SIGSTORE integration, and enhanced hardware security, empowering enterprises with robust infrastructure protection.
Secure Your Project with the SIG Release Supply Chain Kit
Explore tools for enhancing supply chain security in open-source projects, including SBOMs, signed attestations, and secure release pages. Learn how to implement these features using reusable GitHub actions.
Updates from The Update Framework
Explore The Update Framework's role in secure content delivery, its protection against supply chain attacks, and its evolving ecosystem with insights from TUF maintainers.
Fun with Continuous Compliance
Explore continuous compliance strategies, including OSCAL for automated assessments and OSS tools like Falco and Voucher for scalable implementation, to streamline and modernize your DevSecOps compliance approach.
Enhancing Data Protection Workflows with Kanister and Argo Workflows
Explore advanced data protection strategies using Kanister and Argo workflows for enhanced cloud-native security and efficient backup processes.
Secure Your Software Supply Chain Using Observability
Explore techniques for enhancing software supply chain security through observability, focusing on key benefits and practical implementation strategies.
Air Gap: A Short Introduction and Why It Isn't Complicated
Discover the simplicity of Air Gap technology in this concise introduction, demystifying its concepts and applications for easy understanding.
Green Software and Open Hardware: Addressing Ecological Impact in IT
Exploring the ecological impact of software and IT infrastructure, discussing best practices and technologies to reduce the carbon footprint of digital systems and data centers.
The Update Framework (TUF) Maintainer Panel: Integrations, Enhancements, and Supply Chain Security
Panel discussion on The Update Framework: insights on integrations, supply chain security, and open-source project maintenance from TUF maintainers across various implementations and organizations.
CTF Overview and Experience - Preparing for SecurityCon
Prepare for SecurityCon's CTF event with a warm-up session covering container breakouts and Kubernetes misconfigurations. Suitable for all experience levels, learn CTF engagement techniques.
Vanquishing Vulnerabilities - Preparing for Critical CVEs
Prepare for critical vulnerabilities with tools and practices for container image scanning, policy enforcement, network control, runtime configurations, and behavior monitoring.
How to Reduce CVE Noise with VEX - Vulnerability-Exploitability eXchange
Explore VEX, a tool to enhance vulnerability management by providing context to CVEs, improving risk assessment, and streamlining communication between vendors and consumers.
Cloud Native - Protecting Software Supply Chains Using Kyverno
Explore Kyverno's role in safeguarding software supply chains, enhancing security practices, and ensuring compliance in cloud-native environments.
ADHD: Understanding, Awareness, and Inclusivity in Cloud-Native Communities
Exploring ADHD in tech: Neurodivergent speakers share experiences, insights, and tips for recognizing and supporting ADHD in the cloud-native community, promoting inclusivity and awareness.
Inclusive, Accessible Tech: Bias-Free Language in Code and Configurations
Explore tools and methods for implementing bias-free language in tech, from code to documentation. Learn to inventory assets, prioritize changes, and automate analysis for more inclusive communication.
Securing the Supply Chain with Witness - A Framework for Supply Chain Security
Explore Witness, an open-source framework for supply chain security, its trust model, and implementation in CI pipelines. Learn about attestation collections, policy enforcement, and integration with cloud-native tools.
Towards the Cloud Native Telco: Learning from the Trenches
Insights on cloud-native transformation in telecom, focusing on Kubernetes deployment for 5G Core platforms and addressing key improvement areas for reliable service delivery.