How SIG Release Cooks Trustworthy... - Carlos Panato & Adolfo Veytia, Jeremy Rickard, Sascha Grunert
Description:
Explore the intricate process of transforming Kubernetes source code into trustworthy artifacts in this informative conference talk. Gain insights into the workings of the Kubernetes Special Interest Group (SIG) Release, their recent achievements, and updated roadmap. Discover the ongoing efforts towards full SLSA (Supply-chain Levels for Software Artifacts) compliance and the move to community-controlled infrastructure for build processes and distribution. Learn about the expansion of artifact signing beyond containers and how to get involved in SIG Release. Understand the importance of these initiatives and the various ways to contribute, including SIG Release tooling, the Release Manager role, and the contributor ladder.
How SIG Release Cooks Trustworthy Artifacts From Raw Source Code - Kubernetes Build Process