Securing the Open Source Software Supply Chain
Explore tools and best practices for securing the open-source software supply chain, addressing vulnerabilities, and enhancing trust in the ecosystem. Learn about recent developments and future improvements.
Continuous Assurance of Supply Chain Security Levels of Open Source Artifacts Using SLSA 0.1
Discover how to verify SLSA provenance in trusted build systems to enhance supply chain security and protect against modified sources, compromised builds, and package tampering.
Navigating the Open Source Policy Labyrinth: Unraveling Global Policy Efforts for a Secure Future
Explore global policy initiatives shaping open-source software security, from US Executive Orders to EU regulations, while understanding how modern frameworks like SLSA and Software Self Attestation enhance digital infrastructure.
Meeting the OpenSSF Security Baseline with Minder
Discover how Minder platform helps monitor and ensure OpenSSF Security Baseline compliance across repositories, with practical demonstrations of automated security posture management.
End-to-End Secure Machine Learning Development - Building a Secure AI Supply Chain
Discover essential security practices for AI development, from dataset handling to production deployment, focusing on supply chain security, model provenance, and risk mitigation in machine learning applications.
Fast, Correct, Secure - Building Reliable and Secure Software with Bazel
Explore advanced Bazel features for building secure, fast, and correct software at scale, including SBOM generation, audit trails, and achieving SLSA compliance in development pipelines.
Understanding Software Component Analysis (SCA) in Plain Language
Gain insights into software supply chain security concepts like SBOM, VEX, and SLSA, demystifying their importance for protecting organizational assets and code integrity.
SBOM: The Inescapable Way of Tracking Dependencies
Explore SBOM's role in preventing cyber-attacks, its formats, and implementation across the software development lifecycle. Learn to generate, manage, and monitor SBOMs for enhanced security.
Better Build Pipelines with OpenSSF Projects - Enhancing Trust and Security
Enhance build pipeline security using OpenSSF projects: cosign, SBOMs, and SLSA. Demonstrate kpack for container image building on Kubernetes, integrating signed images and SBOM generation.
What Is Going On In Your Source Code? Understanding Software Component Analysis in Plain Language
Gain insights into software supply chain security concepts like SBOM, VEX, and SLSA, understanding their importance in protecting organizations from emerging security threats.
PEP 740 and PyPI - Bootstrapping Provenance for the Python Ecosystem
Explore how PEP 740 enhances PyPI's security through digital attestations, integrating with Sigstore and SLSA to provide robust package provenance without complex key management.
Open Source Software Supply Chain Security - Understanding Threats and Best Practices
Explore critical threats to open source software supply chains, industry best practices for security, and practical strategies for protecting against vulnerabilities and cyberattacks.
Security Threat Model Analysis and Protection Practice in Edge Computing
Análisis de modelos de amenazas y prácticas de protección en computación de borde, incluyendo auditoría de seguridad de KubeEdge, iniciativas de mejora y cumplimiento SLSA L3 para fortalecer la seguridad en escenarios de edge computing.
Improving Supply Chain Integrity with OpenSSF Technologies - Panel Discussion
Experts discuss OpenSSF technologies like SLSA, S2C2F, and GUAC, exploring their impact on open source security and software supply chain integrity. Learn about implementation and improving security posture.
GitHub-Azure Authentication and SLSA in DevOps
Explore GitHub Actions authentication for Azure and SLSA principles in DevSecOps. Learn passwordless methods, security levels, and contribute to open-source supply chain security projects.
Secure by Design CI/CD: Practical Insights for Pipeline Security
Discover practical strategies for securing CI/CD pipelines through real-world insights from Adobe and Autodesk, featuring reference architectures, security controls, and implementation of CNOE stacks for cloud-native excellence.
Secure Development in Open Source - The Road to SLSA Level 3 Compliance for Eclipse Temurin
Discover how Eclipse Temurin achieves SLSA Level 3 compliance through secure development practices, cloud-based Jenkins implementations, and open-source distribution methods across multiple platforms.
Secure Release Processes with in-Toto Policy Verification
Discover how to enforce secure software release processes using in-toto's policy verification system, covering attestations, SDLC compliance, and build provenance for enhanced security measures.
Practical Supply Chain Security: Implementing SLSA Compliance from Build to Runtime
Discover practical strategies for implementing SLSA compliance, from using GitHub Actions and Cosign for artifact signing to enforcing runtime policies with Kyverno and securing keys with HSMs.