Notary v2 - Supply Chain Security for Containers
Explore a comprehensive overview of Notary v2, a community project aimed at enhancing supply chain security for containers, in this informative conference talk by Justin Cormack from Docker and Steve Lasker from Microsoft. Delve into the project's goals, its role in addressing issues hindering widespread adoption of the existing Notary project, and its integration with other supply chain initiatives. Learn about the requirements, ongoing work, and the roadmap to production for Notary v2. Gain insights into cloud-native software, container security, and pipeline security. Watch a demonstration covering Docker plugin addition, alias creation, ephemeral client support, artifact discovery and pushing, and Docker image pull processes. Discover the "World's Most Simple Assessment," Sbomb, and Reference Graph concepts. Find out where to access more information and resources on this crucial project for registry-native supply chain security.