Security Concerns in Every Stage of the Software Supply Chain
Explore security concerns throughout the software supply chain, from development to deployment. Learn strategies to mitigate risks and enhance overall security posture in DevOps practices.
Securing Your Software Supply Chain with SBOMs
Explore software supply chain security through SBOMs, focusing on artifact provenance and package identification for enhanced protection.
Understanding Risk: Supply Chain Transparency and SBOM
Gain insights into supply chain transparency and SBOM implementation strategies for better risk management and security in IoT ecosystems.
Protect the Pipe - A Policy-based Approach for Securing CI/CD Pipelines
Explore a cloud-native security framework for CI/CD pipelines using in-toto, Kyverno, and sigstore. Learn to implement policy-based controls and address unique security challenges in modern application delivery.
Large-Scale Software Composition Analysis: Uncovering Vulnerable Dependencies in 600 Apps
Discover how OWASP Dependency-Check enabled large-scale Software Composition Analysis on hundreds of vendor-managed apps, addressing software supply chain risks and patch debt in just two months.
Cloud Native Security Landscape - Myths, Dragons, and Real Talk
Explore cloud-native security across the software lifecycle, from open-source creation to runtime threat detection. Learn about key projects, developer-security team collaboration, and separating real risks from myths.
Securing Identity and Authorization in Microservices
Explore Transaction Tokens (TraTs) for securing microservices, enhancing user identity and context in call chains, and defending against various attacks in distributed architectures.
Configuration as Code: Managing Hundreds of GitHub Organizations for Supply Chain Security
Streamlining GitHub organization management through configuration as code to enhance supply chain security, automate tasks, and reduce vulnerabilities across multiple repositories.
Advancements in Confidential Computing
Explore SUSE's advancements in Confidential Computing, focusing on protecting data in use through isolated, encrypted environments for secure application processing across core, cloud, and edge.
Infusing Security Into the Application Development Process
Explore integrating security into software development, covering topics like SBOMs, vulnerability scanning, and supply chain security. Learn practical strategies for secure coding practices.
Linux Foundation Member Summit 2022 - Keynote Sessions
Keynote sessions exploring open source trends, security, supply chain threats, institutional roles, and adapting to change. Insights from industry leaders on critical issues shaping the open source landscape.
Cloud Native Supply Chain Security: Beyond SBOMs - Perspectives and Practices
Insights on cloud native supply chain security beyond SBOMs. Experts discuss straightforward approaches, simple security practices, and future perspectives using open-source tools and frameworks.
Linux on Mars and Software Supply Chain Security - OSS Keynotes Day 3
Explore Mars exploration, open source insights, and software supply chain security with NASA, Microsoft, and Linux Foundation experts in this keynote series.
Open Source Security and Supply Chain Innovations - Keynote Sessions
Explore cutting-edge topics in open source security, including supply chain protection, Sigstore, SPDX, eBPF, SLSA, and memory safety, presented by industry leaders and experts.
Releasing Kubernetes Less Often and More Securely - SIG Release Update
Discover the latest updates from Kubernetes SIG Release, including efforts to enhance security, streamline release processes, and achieve SLSA compliance. Learn about roadmap, vision, and opportunities to contribute.
Secure by Default with GitOps - A Guide to OPA with Argo CD
Learn to integrate Argo CD and Open Policy Agent for secure GitOps practices, enhancing software delivery supply chain security through admission hooks, sync waves, and other strategies.
Trust in Honk, Tie Up Your YAML - A Kpack Experience for Container Image Building
Explore kpack for building container images on Kubernetes, leveraging Cloud Native Buildpacks and enhancing supply chain security through declarative resources and automated processes.
Introduction to Kubernetes Security
Explore Kubernetes security essentials for operations and application development. Learn cluster access, network policies, secrets management, and secure container building techniques.
Kyverno - Deep Dive - Tech Talks
Deep dive into Kyverno 1.9 features: mutation, generation, image verification, cleanup policies, and policy exceptions. Includes demos and best practices for secure software supply chain.
Building Images for the Secure Supply Chain
Techniques and tools for building secure container images, including distroless philosophy, updating dependencies, using apko for reproducibility, and signing with Sigstore.
Securing the IaC Supply Chain
Explore securing Infrastructure as Code supply chains, applying software security principles to IaC pipelines. Learn about Crossplane's integration with Sigstore for enhanced provenance and attestations.