Secure Your Project with the SIG Release Supply Chain Kit
Explore tools for enhancing supply chain security in open-source projects, including SBOMs, signed attestations, and secure release pages. Learn how to implement these features using reusable GitHub actions.
Attacking and Defending Kubernetes TEE Enclaves in Critical Infrastructure
Explore Kubernetes TEE enclaves for critical infrastructure security. Learn attack and defense strategies, threat modeling, and compliance benefits for various regulations.
Updates from The Update Framework
Explore The Update Framework's role in secure content delivery, its protection against supply chain attacks, and its evolving ecosystem with insights from TUF maintainers.
The Update Framework (TUF) Maintainer Panel: Integrations, Enhancements, and Supply Chain Security
Panel discussion on The Update Framework: insights on integrations, supply chain security, and open-source project maintenance from TUF maintainers across various implementations and organizations.
Securing the Supply Chain with Witness - A Framework for Supply Chain Security
Explore Witness, an open-source framework for supply chain security, its trust model, and implementation in CI pipelines. Learn about attestation collections, policy enforcement, and integration with cloud-native tools.
Dissecting the 0-Day Supply Chain Vulnerability in Argo CD
Explore the discovery and implications of a critical 0-day vulnerability in Argo CD, including attack methods, remediation steps, and its impact on the ecosystem.
Securing Your Container Native Supply Chain with SLSA, GitHub and Tekton
Practical guide to securing container native supply chains using SLSA principles, in-toto attestations, and step-by-step demos for achieving SLSA Level 2 in Tekton and Github Actions.
Distributing Supply Chain Artifacts with OCI and ORAS Artifacts
Explore secure distribution of supply chain artifacts using OCI & ORAS Artifacts. Learn about managing artifact relationships, lifecycle management, and evolving registry capabilities for cloud-native environments.
Enforcing Supply Chain Security and Simplifying Compliance Audit for ArgoCD Deployments
Explore techniques for securing supply chains and simplifying compliance audits in ArgoCD deployments using open-source tools like Guac, Sigstore, and in-toto.
Making Sense of Security Supply Chain - An Overview for Beginners
Explore supply chain security fundamentals, tools like Fulcio, Rekor, and cosign, and their integration in this beginner-friendly overview of the rapidly evolving landscape.
SEAPATH: A LF Energy Project for Critical Infrastructure with Emphasis on Software Supply Chain Security
Explore SEAPATH, an LFEnergy project revolutionizing electrical grid substations through virtualization, enhancing adaptability and interconnections while prioritizing reliability and cybersecurity for critical infrastructure.
Supply Chain Security - Part 1
Explore best practices for establishing trust across supply chains and gain insights on shifting from technology inspection to relationship-based trust in an era of increased third-party dependencies.
RSAC 365 Virtual Seminar - Supply Chain Security
Explore open-source supply chain threats, defense frameworks, and incident response strategies. Learn to track attackers, protect your organization, and shift thinking on supply chain security from experts in the field.
A Mouthful of Mayhem: Taste Test and Gut Response to SLSA, GUAC, and Supply Chain Security
Explore popular supply chain security ingredients and learn how to combine them effectively to address threats in your organization's ecosystem.
BuildSafe Deep Dive - Getting Supply Chain Security Right Using Nix
Explore BuildSafe's capabilities for secure application builds using Nix, including package search, CVE information, and simplified development workflows.
Supply Chain Security - The First Steps
Explore supply chain security essentials, including zero trust, SBOMs, and sigstore. Learn to generate and utilize SBOMs to enhance software development security and meet compliance requirements.
Secure Your App: DevSecOps Trusted Application Supply Chain
Explore DevSecOps principles and implement a trusted application supply chain to enhance app security and streamline development processes.
Hyades - Dependency Track for Enterprise Supply Chain Security with SBOM
Enhance enterprise supply chain security using Dependency Track with SBOM in Hyades, a powerful tool for managing software dependencies.
Security Keynote - Open Source Software and Cybersecurity
Explore cybersecurity insights and strategies with Dr. Allen Friedman's keynote address on critical security challenges and solutions in the digital landscape.
Nation-State Threats in the Open-Source Software Supply Chain
Explore nation-state threats in open-source software, focusing on North Korean Lazarus Group's npm campaigns. Learn evolving tactics and motivations to better defend against sophisticated cyber threats.
Demystifying SBOMs: Strengthening Cybersecurity Defenses
Explore Software Bill of Materials (SBOMs) as a crucial tool for enhancing cybersecurity, identifying vulnerabilities, and managing software supply chain risks in organizations.