AI and the Software Supply Chain - Evolving Security Strategies
Explore how AI and other methods enhance software supply chain security, addressing advanced attacks and evolving developer toolkits for improved protection.
What Hacking the Planet Taught Us About Defending Supply Chain Attacks
Discover insights from global hacking experiences to enhance software supply chain defense strategies and protect organizations against evolving threats.
Improving Supply Chain Integrity with OpenSSF Technologies - Panel Discussion
Experts discuss OpenSSF technologies like SLSA, S2C2F, and GUAC, exploring their impact on open source security and software supply chain integrity. Learn about implementation and improving security posture.
A Step Closer to Secure Development: Using in-Toto and OPA Gatekeeper to Verify Artifact Integrity
Explore securing software supply chains using in-toto, Witness, Archivista, and OPA Gatekeeper. Learn to verify artifact integrity from development to Kubernetes deployment.
Securing Your Supply Chain with an Open Source Ecosystem
Explore open-source tools and best practices for securing software supply chains across creation, build, deployment, and runtime stages. Learn to leverage automation and DevSecOps to reduce vulnerabilities.
Practical Guides for Enhancing Your Software Supply Chain Security
Practical guide to fortify software supply chain security using open-source tools. Covers building, packaging, dependencies, code scanning, and establishing trust across the delivery process.
GitHub-Azure Authentication and SLSA in DevOps
Explore GitHub Actions authentication for Azure and SLSA principles in DevSecOps. Learn passwordless methods, security levels, and contribute to open-source supply chain security projects.
Navigating the Quantum Readiness Journey - Open-Source Cryptography, PKI and Signing Tools
Explore post-quantum cryptography standards and their implementation in open-source tools, focusing on IoT, container security, and software supply chain protection through quantum-resistant solutions.
TUF - Secure Distribution Beyond Software
Discover how The Update Framework (TUF) enables secure distribution of metadata, signing keys, and attestations while ensuring data integrity and tamper resistance in cloud native ecosystems.
Secure by Design CI/CD: Practical Insights for Pipeline Security
Discover practical strategies for securing CI/CD pipelines through real-world insights from Adobe and Autodesk, featuring reference architectures, security controls, and implementation of CNOE stacks for cloud-native excellence.
TUF - Secure Distribution Beyond Software
Discover how The Update Framework (TUF) enables secure distribution of metadata, signing keys, and attestations while ensuring data integrity and tamper resistance in cloud native ecosystems.
ONAP's Recipe for Managing CVEs and Securing Open Source Software
Discover ONAP's effective strategies for managing CVEs, securing open-source dependencies, and implementing automated vulnerability management processes in software development.
How to Use Open Source and Standards to Improve Mutual Trust in the Network Ecosystem
Discover how to build secure and trustworthy network infrastructure using open-source methods and standards, focusing on zero-trust frameworks and software supply chain security.
Securing AI Systems and Protecting the Software Supply Chain
Explore key AI security challenges in software development, focusing on OWASP Top 10 for LLMs, supply chain vulnerabilities, and practical mitigation strategies for CI/CD pipelines.
The U.S. Government's Approach to Open Source Security
Discover how CISA is strengthening open source security through community engagement, federal software usage guidelines, and ecosystem-wide initiatives to protect critical infrastructure and prevent vulnerabilities.
The Missing Post Mortem: Social Engineering Attacks on Open Source Projects
Delve into the critical analysis of social engineering attacks targeting open source projects, examining security gaps and exploring solutions that maintain open source community values and innovation potential.
Reducing Risk in Software Supply Chains: A Project Health Perspective with Kubernetes Example
Explore a novel risk assessment model for evaluating open-source dependencies' health and sustainability, with practical insights using Kubernetes as a case study.
Secure Development in Open Source - The Road to SLSA Level 3 Compliance for Eclipse Temurin
Discover how Eclipse Temurin achieves SLSA Level 3 compliance through secure development practices, cloud-based Jenkins implementations, and open-source distribution methods across multiple platforms.
Open Source Security Is Not a Spectator Sport
Discover how CNCF leads open source security innovation through TAG Security initiatives, supply chain recommendations, and community-driven solutions for cloud-native environments.
Secure Release Processes with in-Toto Policy Verification
Discover how to enforce secure software release processes using in-toto's policy verification system, covering attestations, SDLC compliance, and build provenance for enhanced security measures.
Practical Supply Chain Security: Implementing SLSA Compliance from Build to Runtime
Discover practical strategies for implementing SLSA compliance, from using GitHub Actions and Cosign for artifact signing to enforcing runtime policies with Kyverno and securing keys with HSMs.