Confidential Computing - Why It Has to Be Cloud and Open
Explore Confidential Computing's role in enhancing data security, reducing supply chains, and protecting sensitive applications. Learn about its implementation across major cloud platforms and the importance of open-source development.
Developers Are Taking Security Seriously - Evolution in Cloud-Native Security
Explore the evolution of security in cloud-native environments with insights from Linux Foundation's Director of Open Source Supply Chain Security.
LFX Mentorship Showcase - Segment 3
Mentees share experiences and projects from LFX Mentorship program, covering OpenBLAS, AMQ Protocol, supply chain security, Kyverno policies, Linux kernel contributions, and personal growth in open source.
Detecting Malicious Dependencies at Scale with Static Analysis
Explore static analysis techniques for identifying malicious dependencies in open-source packages, including Semgrep rules and metadata analysis to enhance software supply chain security.
Creating Cloud Native Security
Explore cloud native security with experts from Apple, IBM, and VMware. Learn about CNCF's Security TAG initiatives, including supply chain security, project reviews, and community impact.
End User Partner Summit - Cloud Native Adoption and Security Trends
Explore cloud native trends, challenges, and technologies with industry experts. Gain insights on digital transformation, security, and end-user involvement in the CNCF ecosystem.
It's All About Trust - Why Confidential Computing Matters
Explore Confidential Computing's role in enhancing supply chain security, protecting sensitive data, and building trust in complex ecosystems. Learn about its implementation and open-source projects.
Cloud Native Supply Chain Security: Beyond SBOMs - Perspectives and Practices
Insights on cloud native supply chain security beyond SBOMs. Experts discuss straightforward approaches, simple security practices, and future perspectives using open-source tools and frameworks.
Understanding Supply Chain Threats with Static Analysis - GopherCon 2023
Explore a CLI tool for Go that detects privileged permissions in package dependencies, enhancing security and preventing supply chain attacks.
Streamlined AI Impact Assessments for Supply Chain Security - Best Practices
Discover practical strategies for conducting AI impact assessments in supply chain security, focusing on governance, privacy compliance, and vendor due diligence processes.
Secure Supply Chains with Tekton Chains - CNCF
Learn about Tekton Chains for secure software supply chains, including installation, configuration, and verification of provenance documents.
A Treasure Map of Hacking and Defending Kubernetes
Comprehensive guide to Kubernetes security: threat modeling, attack demonstrations, defense strategies, and advanced topics like workload identity and runtime hardening for robust cluster protection.
Foster Secure Innovation with Your Kubernetes Platform
Explore comprehensive security strategies for Kubernetes, covering infrastructure protection, supply chain security, and runtime safeguards in mission-critical cloud-native environments.
Trust in Honk, Tie Up Your YAML - A Kpack Experience for Container Image Building
Explore kpack for building container images on Kubernetes, leveraging Cloud Native Buildpacks and enhancing supply chain security through declarative resources and automated processes.
Policy Driven Approach to Secure CI/CD Workflow
Explore how Tekton, ArgoCD, and Kyverno can enhance CI/CD pipeline security, compliance, and reliability. Learn to automate policy enforcement and address supply chain vulnerabilities in Kubernetes environments.
The Certified Kubernetes Security Specialist: What to Know and How to Pass
Explore Kubernetes security controls, exam preparation strategies, and open-source resources for the Certified Kubernetes Security Specialist certification in this comprehensive webinar.
Building Images for the Secure Supply Chain
Techniques and tools for building secure container images, including distroless philosophy, updating dependencies, using apko for reproducibility, and signing with Sigstore.
Trust But Verify: Bringing Supply Chain Integrity to CD GitOps
Explore how to enhance CD GitOps with supply chain controls, ensuring integrity and tamper-proof deployments through keyless signing, transparency logs, and cluster enforcement of signatures and policies.
CRI-O's Senior Year - Overview and New Developments
Explore CRI-O's journey towards CNCF graduation, including new developments like conmon-rs, sigstore integration, and Kubernetes alignment for enhanced container runtime stability and security.
Flawed ML Security: Mitigating Security Vulnerabilities in Data and Machine Learning Infrastructure with MLSecOps
Explore security vulnerabilities in machine learning infrastructure and learn practical strategies for mitigating risks using MLSecOps. Gain insights on RBAC, encryption, and best practices for robust ML systems.
Introducing the OWASP Top Ten for Kubernetes
Explore OWASP's Top Ten Kubernetes risks, learn about common security issues, and discover strategies to enhance your containerized infrastructure's protection.