Главная
Study mode:
on
You
History
Saved
In progress 0 courses
compleat 0 courses
#Art & Design #Adobe #ChatGPT #GitHub

#Cosign

Showing: 25 courses
CNCF [Cloud Native Computing Foundation]

Securing the Supply Chain: A Practical Guide to SLSA Compliance from Build to Runtime

0 rewiews
Dive into SLSA compliance for supply chain security using CNCF tools. Explore GitHub Actions, Cosign, Kyverno, in-toto, and Kubescape to secure software from build to runtime in Kubernetes ecosystems.
Add to list
1 Lesons
33 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

Secure Supply Chain in Kubernetes

0 rewiews
Implementação de pipelines seguros e aplicações confiáveis para Kubernetes usando ferramentas open-source como OPA e Cosign para verificações e assinaturas em uma cadeia de suprimentos de software segura.
Add to list
1 Lesons
35 minutes
On-Demand
Free-Video
Linux Foundation

Software Supply Chain Integrity with Sigstore

0 rewiews
Learn about Sigstore, a tool for securing software supply chains, with demos on Cosign for signing and verifying artifacts, and insights on its practical applications.
Add to list
18 Lesons
23 minutes
On-Demand
Free-Video
Linux Foundation

Attesting Practically: Exploring the Glue Behind Secure Runtime Environments

0 rewiews
Explore practical applications of attestations in software supply chain security, focusing on Cosign, in-toto, and VEX to create secure, auditable runtime environments and effectively manage security threats.
Add to list
1 Lesons
40 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

SLSA with Cosign and Kyverno - Securing Software Delivery in Cloud Native Environments

0 rewiews
Explore SLSA, Cosign, and Kyverno for enhancing software delivery security in cloud-native environments. Learn practical techniques to safeguard your development pipeline.
Add to list
1 Lesons
1 hour
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

Making Sense of Security Supply Chain - An Overview for Beginners

0 rewiews
Explore supply chain security fundamentals, tools like Fulcio, Rekor, and cosign, and their integration in this beginner-friendly overview of the rapidly evolving landscape.
Add to list
1 Lesons
24 minutes
On-Demand
Free-Video
Linux Foundation

Growing the Chain: Trusting Build Provenance from Userspace

0 rewiews
Explore techniques for establishing trust in CI/CD workflows, focusing on artifact signing, provenance generation, and building a chain of trust using open-source technologies like Sigstore and OIDC.
Add to list
1 Lesons
33 minutes
On-Demand
Free-Video
Rawkode Academy

Hands-on Introduction to Sigstore - Securing the Software Supply Chain

0 rewiews
Comprehensive introduction to sigstore, covering container image signing, keyless mode, transparency logs, and image policy enforcement with Kyverno for enhanced software supply chain security.
Add to list
7 Lesons
1 hour 8 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

Securing the Supply Chain: A Practical Guide to SLSA Compliance from Build to Runtime

0 rewiews
Practical guide to securing software supply chain using CNCF tools. Covers SLSA compliance, GitHub Actions, Cosign, Kyverno, in-toto, and Kubescape for build-to-runtime security in Kubernetes ecosystems.
Add to list
1 Lesons
34 minutes
On-Demand
Free-Video
OpenSSF

Leveraging Sigstore Capabilities in a Local Environment

0 rewiews
Explore Lockheed Martin's integration of Sigstore for secure, auditable software development. Learn about internal Kubernetes deployments, certificate authorities, and streamlined GitLab pipelines for enhanced security.
Add to list
1 Lesons
13 minutes
On-Demand
Free-Video
OpenSSF

SLSA: A Security Paradigm for Software Supply Chain Integrity

0 rewiews
Explore SLSA levels, software supply chain security basics, and tools like Cosign to enhance artifact integrity and benefit your organization.
Add to list
1 Lesons
58 minutes
On-Demand
Free-Video
DevSecCon

Power of AI: DevSecOps and Cloud Artifact Signing Explored - Sessions 1 and 2

0 rewiews
Explore AI's impact on DevSecOps and cloud artifact signing. Learn how AI enhances security automation, vulnerability scanning, and threat detection. Discover tools for ensuring trust and integrity in cloud environments.
Add to list
1 Lesons
1 hour 21 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

Harbor - Enterprise Cloud Native Artifact Registry

0 rewiews
Explore advanced features of Harbor, an open-source registry for cloud-native artifacts. Learn about image signatures, cloud management, unified Helm and container handling, and high-availability deployments.
Add to list
1 Lesons
36 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

Trust in Honk, Tie Up Your YAML - A Kpack Experience for Container Image Building

0 rewiews
Explore kpack for building container images on Kubernetes, leveraging Cloud Native Buildpacks and enhancing supply chain security through declarative resources and automated processes.
Add to list
1 Lesons
29 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

Securing Kubernetes Manifests with Sigstore and Kyverno

0 rewiews
Learn to secure Kubernetes resources using Sigstore for signing YAML definitions and Kyverno for verification during admission controls, with real-world use cases for tamper-prevention and approval workflows.
Add to list
1 Lesons
22 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

Demystify Modern Signing: Keys, Certificates, and Envelopes

0 rewiews
Explore practical aspects of cryptographic signing tools, covering key algorithms, signing envelopes, certificates, and verification, with a focus on identity-based signing using short-lived keys.
Add to list
1 Lesons
33 minutes
On-Demand
Free-Video
Linux Foundation

Modernizing Image Security in CI/CD with Cosign and OPA

0 rewiews
Explore Cosign for image signing and OPA for policy enforcement in CI/CD pipelines. Learn implementation strategies and see a hands-on demo for securing Kubernetes deployments.
Add to list
1 Lesons
48 minutes
On-Demand
Free-Video
Linux Foundation

Verifying and Signing EBPF Programs with Inspektor Gadget

0 rewiews
Enhance eBPF program security with Inspektor Gadget. Learn to sign and verify OCI images using cosign, improving overall system safety by running only authenticated eBPF programs.
Add to list
1 Lesons
24 minutes
On-Demand
Free-Video
OpenSSF

From Cosign to an Ecosystem - The Evolution of Sigstore

0 rewiews
Explore the evolution of Sigstore's software security ecosystem, from its core components to advanced integrations for package managers, CI workflows, and policy enforcement tools.
Add to list
1 Lesons
29 minutes
On-Demand
Free-Video
OpenSSF

Exploring Essential Security Checks for Open Source Go Projects

0 rewiews
Discover essential security tools for Go projects: gosec, govulncheck, and sigstore/cosign. Learn to enhance code security, scan vulnerabilities, and secure the supply chain.
Add to list
1 Lesons
25 minutes
On-Demand
Free-Video
DevSecCon

Secure Kubernetes Manifests with Cosign and Kyverno

0 rewiews
Explore open-source tools Cosign and Kyverno to secure container images and Kubernetes manifests. Learn implementation strategies for production clusters and essential use cases.
Add to list
1 Lesons
20 minutes
On-Demand
Free-Video
OpenSSF

Better Build Pipelines with OpenSSF Projects - Enhancing Trust and Security

0 rewiews
Enhance build pipeline security using OpenSSF projects: cosign, SBOMs, and SLSA. Demonstrate kpack for container image building on Kubernetes, integrating signed images and SBOM generation.
Add to list
1 Lesons
14 minutes
On-Demand
Free-Video
GoLab conference

Essential Security Checks for Your Go Project

0 rewiews
Implement essential security checks in Go projects using open-source tools like gosec, govulncheck, and sigstore/cosign. Learn to integrate code analysis, vulnerability scanning, and supply chain security.
Add to list
1 Lesons
45 minutes
On-Demand
Free-Video
Devoxx

Practical Guides for Enhancing Your Software Supply Chain Security

0 rewiews
Practical guide to fortify software supply chain security using open-source tools. Covers building, packaging, dependencies, code scanning, and establishing trust across the delivery process.
Add to list
1 Lesons
35 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

Practical Supply Chain Security: Implementing SLSA Compliance from Build to Runtime

0 rewiews
Discover practical strategies for implementing SLSA compliance, from using GitHub Actions and Cosign for artifact signing to enforcing runtime policies with Kyverno and securing keys with HSMs.
Add to list
1 Lesons
32 minutes
On-Demand
Free-Video