SLSA - A Supply Chain Security Framework
Explore SLSA framework for securing software supply chains, mitigating vulnerabilities, and ensuring code integrity from development to deployment.
Reviewing NuGet Packages Security Using OpenSSF Scorecard
Explore OpenSSF Scorecard for assessing NuGet package security. Learn to evaluate maintenance, workflows, and security tools to improve application safety and make informed decisions.
Trusted Decentralized Package Network - Enhancing Software Supply Chain Security
Explore Pyrsia, an open-source project enhancing software supply chain security through distributed networks, blockchain, and seamless integration with popular packages.
Planning for Retirement: How Can We Prepare for Software's End-of-Life and End-of-Support - Lecture
Explore software end-of-life/support challenges, terminology, and potential solutions. Discuss impacts on supply chain security and the role of transparency efforts in managing EOL/EOS issues.
OSS Supply Chain Security: Drowning in Information, While Starving for Wisdom?
Explore challenges and opportunities in open source software supply chain security, focusing on actionable knowledge for developers and operators amid increasing information availability.
CISO Perspectives on Transforming Third-Party Risk Management
Insights from Fortune 1000 CISOs on innovative strategies to mitigate third-party risks, reduce incidents, and minimize business impact across various industries.
Amplifying Impact: Documentation and Supply Chain Security
Explore how high-quality documentation enhances security practices, based on DORA research. Learn measurement techniques, key findings, and strategies to improve documentation for better security outcomes.
AI for Sustainable Logistics and Supply Chain Management
Explore AI's role in sustainable logistics and supply chain management, covering CO2 reduction, efficiency, optimization, resilience, and security from academic and industry perspectives.
Challenges of Future Supply Chain Management - Possibilities of AI
Explore AI's role in addressing future supply chain challenges, focusing on sustainability, efficiency, and resilience in logistics management.
Staring Into the Abyss with the Security Technical Advisory Group
Explore cloud native security with CNCF's Security TAG. Learn about their charter, ongoing projects, and community impact. Discover how to get involved in shaping the future of cloud native security.
Secure Software Factory - Adding SBOM and Code Signing to Security Checks
Enhance your security checks with SBOM and code signing in a secure software factory, improving software supply chain integrity and compliance.
Verifiable Build Environments in the Cloud - Powered by Sigstore and Enclaves
Explore how Sigstore enhances confidential computing security, minimizing trusted compute base while maintaining engineering velocity. Learn about cloud-based verifiable build environments.
Open Source Summit Keynotes - Day 1
Explore key open-source initiatives: 3D engine development, rare disease treatments, supply chain security, and industry insights from tech leaders in this Linux Foundation keynote series.
Supply Chain Anarchy - Trojaned Binaries in the Java Ecosystem
Explore the security risks of third-party code in Java applications, focusing on potential discrepancies between source code and binaries. Learn about an automated security pipeline for detecting malicious differences.
Staring Into the Abyss with the Security Technical Advisory Group
Explore CNCF's Security TAG efforts, including security reviews, supply chain security, and community initiatives. Learn about cloud native security mechanisms and how to get involved.
Generating Software Bill of Materials - Mentorship Session
Learn to generate Software Bill of Materials (SBOM) for efficient analysis of software supply chain, covering available options and open source tools for SBOM creation and usage.
From SBOMs to IBOMs - Know What's Happening in Your Clusters
Explore the importance of Infrastructure Bill of Materials (IBOM) in cloud-native environments, its role in security, and how to leverage it for cost optimization and reducing attack surfaces.
High-Security, Zero-Connectivity and Air-Gapped Clouds - Delivering Complex Software with OCM and Flux
Explore delivering complex software across security boundaries using Open Component Model and Flux. Learn about GitOps Localization for air-gapped environments and end-to-end supply chain shielding.
Package Transparency for WebAssembly Registries
Explore WebAssembly package distribution with warg, a new registry protocol offering enhanced supply chain security through Package Transparency, verifiable data structures, and easy detection of operator compromise.
Cloud Native Security Whitepapers Overview
Overview of TAG Security's whitepapers and reference architectures for cloud native security, covering topics like supply chain security, zero knowledge, and security controls mapping.
Staring Into the Abyss With the Security Technical Advisory Group
Introduction to CNCF Security Technical Advisory Group, covering its charter, scope, and key initiatives like Security Reviews and Supply Chain Security Paper. Learn about cloud native security and how to get involved.