Главная
Study mode:
on
1
Introduction
2
About Datadog
3
Agenda
4
Why
5
Tools
6
Survey Tools
7
Notary V1
8
Graphase
9
Notary V2
10
Update Framework
11
Cosine
12
How are we using Datadog
13
Requirements
14
Demo
15
Conclusion
Description:
Explore the challenges and solutions for private container image signing in this 26-minute conference talk from KubeCon + CloudNativeCon Europe 2023. Delve into the growing importance of software supply chain security and the differences between open source and private container image signing. Learn about various signing technologies, including Sigstore and Notary v2, and their applications in internal Kubernetes software supply chains. Discover Datadog's security team's insights on implementing integrity controls for private container images, comparing open source and internal signing processes. Gain valuable knowledge on scaling signing frameworks and addressing unique challenges in private environments.

Who's Verifying Your Signatures? Approaching Private Container Image Signing

CNCF [Cloud Native Computing Foundation]
Add to list