Главная
Study mode:
on
You
History
Saved
In progress 0 courses
compleat 0 courses
#Art & Design #Adobe #ChatGPT #GitHub

#Software Supply Chain Security

#in-toto #SLSA
Showing: 278 courses
CNCF [Cloud Native Computing Foundation]

Securing the Supply Chain: A Practical Guide to SLSA Compliance from Build to Runtime

0 rewiews
Dive into SLSA compliance for supply chain security using CNCF tools. Explore GitHub Actions, Cosign, Kyverno, in-toto, and Kubescape to secure software from build to runtime in Kubernetes ecosystems.
Add to list
1 Lesons
33 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

Secure Supply Chain in Kubernetes

0 rewiews
Implementação de pipelines seguros e aplicações confiáveis para Kubernetes usando ferramentas open-source como OPA e Cosign para verificações e assinaturas em uma cadeia de suprimentos de software segura.
Add to list
1 Lesons
35 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

In-Toto: Protecting Software Supply Chain in Cloud Native and Confidential Containers

0 rewiews
探讨In-toto项目如何保护软件供应链完整性,以及在Confidential Containers等云原生应用中的应用,展示其在提供可信元数据和验证供应链步骤方面的优势。
Add to list
1 Lesons
40 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

Kicking Security Chain Attacks to the Curb with Kyverno and Notary in GitOps

0 rewiews
使用Kyverno和Notary等CNCF项目建立容器镜像信任,验证资源,并在GitOps中实施以提高软件供应链安全性。展示如何应对现代Kubernetes部署中的安全挑战。
Add to list
1 Lesons
39 minutes
On-Demand
Free-Video
Linux Foundation

Security Threat Model Analysis and Protection Practice in Edge Computing Scenarios

0 rewiews
Analyze security threats in edge computing, explore KubeEdge's audit process, and learn protection practices for cloud-native environments. Gain insights on improving security in multi-cloud and hybrid scenarios.
Add to list
1 Lesons
44 minutes
On-Demand
Free-Video
USENIX Enigma Conference

Securing the Software Supply Chain - Go Checksum Database

0 rewiews
Exploring Go's checksum database design to secure software supply chains, addressing vulnerabilities in third-party dependencies and enhancing ecosystem integrity.
Add to list
15 Lesons
22 minutes
On-Demand
Free-Video
RSA Conference

We're Not Doomed! How to Successfully Manage Software Supply Chain Security

0 rewiews
Discover strategies to enhance DevSecOps and protect against software supply chain attacks using real-world examples and the OSCAR framework. Learn to assess and improve your organization's security practices.
Add to list
1 Lesons
44 minutes
On-Demand
Free-Video
Linux Foundation

Policy Compliance with Sigstore - From Signing Software to Validating the Whole Software Supply Chain

0 rewiews
Explore sigstore for software signing and verification, and learn how to implement policy compliance in cloud-native software build and deployment processes using automation and tools.
Add to list
9 Lesons
34 minutes
On-Demand
Free-Video
Linux Foundation

Dependency Hijacking Vulnerability in Microsoft Teams - Supply Chain Security Gaps

0 rewiews
Explore real-world dependency hijacking in Microsoft Teams, understanding software supply chain vulnerabilities and learning strategies to protect infrastructure, SDLC, and code.
Add to list
14 Lesons
56 minutes
On-Demand
Free-Video
Mirantis

How to Secure Your Software Supply Chain on Windows Server

0 rewiews
Explore challenges and solutions for securing software supply chains on Windows Server, focusing on Mirantis Container Runtime's role in providing enterprise-grade security for container workflows and Kubernetes nodes.
Add to list
12 Lesons
39 minutes
On-Demand
Free-Video
OWASP Foundation

Software Bill of Materials (S-BoM) - Reducing Risk in Third-Party Components

0 rewiews
Explore best practices for managing third-party component risks using software bill-of-materials (S-BoM). Learn to create S-BoMs, identify vulnerabilities, and automate security responses in polyglot environments.
Add to list
1 Lesons
36 minutes
On-Demand
Free-Video
OWASP Foundation

SBOM SmackDown - Conquering Software Supply Chain Risks with OWASP CycloneDX

0 rewiews
Explore Software Bill of Materials (SBOM) and learn how OWASP CycloneDX standard enhances software supply chain transparency, enabling better risk-based decisions and compliance with government mandates.
Add to list
1 Lesons
50 minutes
On-Demand
Free-Video
OWASP Foundation

Analyzing Google's SLSA Framework for Securing Software Supply Chains

0 rewiews
Explore Google's SLSA framework for securing software supply chains, covering key areas, controls, and additional considerations beyond the framework's scope.
Add to list
11 Lesons
20 minutes
On-Demand
Free-Video
OWASP Foundation

OWASP Dependency Track - Software Composition Analysis and Vulnerability Management

0 rewiews
Explore OWASP Dependency Track: manage software components, analyze vulnerabilities, and enhance security with features like Software Bill of Materials, policy engine, and dependency graphs.
Add to list
14 Lesons
25 minutes
On-Demand
Free-Video
OWASP Foundation

Measure and Improve Software Supply Chain Assurance with OWASP SCVS

0 rewiews
Learn to assess and enhance software supply chain security using OWASP's Software Component Verification Standard (SCVS), improving overall cybersecurity posture.
Add to list
1 Lesons
19 minutes
On-Demand
Free-Video
OWASP Foundation

Threat Modeling the CI/CD Pipeline to Improve Software Supply Chain Security

0 rewiews
Explore threat modeling for CI/CD pipelines to enhance software supply chain security, covering key vulnerabilities, data flow analysis, and mitigation strategies.
Add to list
23 Lesons
28 minutes
On-Demand
Free-Video
OWASP Foundation

Software Supply Chain Security

0 rewiews
Explore software supply chain security with expert Vandana Verma, covering key concepts, best practices, and strategies to protect your development pipeline from vulnerabilities and attacks.
Add to list
1 Lesons
39 minutes
On-Demand
Free-Video
OWASP Foundation

Benchmarking the Security of Your Software Supply Chain

0 rewiews
Learn to assess and enhance the security of your software supply chain through benchmarking techniques, improving overall cybersecurity posture and reducing vulnerabilities.
Add to list
1 Lesons
54 minutes
On-Demand
Free-Video
Docker

Real World Security - Software Supply Chain

0 rewiews
Explore software supply chain security through a case study on misconfigured registries, threat modeling, and best practices for securing the build-ship-run pipeline.
Add to list
1 Lesons
34 minutes
On-Demand
Free-Video
OWASP Foundation

Implementing a Supply Chain Approach to Build and Deploy Secure Applications - AppSecEU 2016

0 rewiews
Explore implementing a supply chain approach to build and deploy secure software, focusing on trust, standardization, and automation in the software delivery pipeline.
Add to list
32 Lesons
46 minutes
On-Demand
Free-Video
OWASP Foundation

Introduction to the Newest Addition to the OWASP Top 10 - A9 Guidelines

0 rewiews
Experts discuss the new OWASP A9 guideline on insecure open source libraries, offering insights on component usage, best practices, and real-world challenges in mitigating risks in agile development.
Add to list
1 Lesons
48 minutes
On-Demand
Free-Video
Linux Foundation

Auto Generate SBOMs for Open Source Projects in Any Language and Platform

0 rewiews
Learn to automatically generate Software Bill of Materials (SBOMs) for open source projects, enhancing security and compliance across languages and platforms.
Add to list
1 Lesons
29 minutes
On-Demand
Free-Video
Linux Foundation

Software Supply Chain Integrity with Sigstore

0 rewiews
Learn about Sigstore, a tool for securing software supply chains, with demos on Cosign for signing and verifying artifacts, and insights on its practical applications.
Add to list
18 Lesons
23 minutes
On-Demand
Free-Video
Linux Foundation

Baking a Cake with Supply Chain Tooling - Securing Software from Scratch

0 rewiews
Explore software supply chain security from an engineer's perspective, discussing tools, standards, and solutions for securing software from scratch.
Add to list
1 Lesons
40 minutes
On-Demand
Free-Video
Linux Foundation

Attesting Practically: Exploring the Glue Behind Secure Runtime Environments

0 rewiews
Explore practical applications of attestations in software supply chain security, focusing on Cosign, in-toto, and VEX to create secure, auditable runtime environments and effectively manage security threats.
Add to list
1 Lesons
40 minutes
On-Demand
Free-Video
Linux Foundation

Introducing GitBOM: Tracking Software Dependencies and Improving Supply Chain Security

0 rewiews
Explore GitBOM, an open-source scheme for tracking dependencies in software, enhancing security and transparency across languages and ecosystems. Learn implementation and benefits for your software supply chain.
Add to list
12 Lesons
20 minutes
On-Demand
Free-Video
Linux Foundation

Gitsign - Keyless Git Commit Signing

0 rewiews
Explore Gitsign, a Sigstore project enabling keyless Git commit signing. Learn its functionality, integration with Sigstore, and application in development, CI/CD, and GitOps workflows.
Add to list
1 Lesons
37 minutes
On-Demand
Free-Video
Linux Foundation

Securing Your Supply Chain by Building with FRSCA

0 rewiews
Explore FRSCA, an OpenSSF project implementing CNCF's Secure Software Factory Reference Architecture to protect against supply chain attacks and enhance build pipeline security.
Add to list
16 Lesons
38 minutes
On-Demand
Free-Video
Linux Foundation

What's in a Name - Vulnerabilities, SBOMs, and the Challenge of Software Identity

0 rewiews
Explore software identity challenges in supply chain security, examining existing naming standards, potential risks, and collaborative solutions for effective vulnerability management.
Add to list
1 Lesons
45 minutes
On-Demand
Free-Video
Linux Foundation

State of SBOM Tools - Improving Software Supply Chain Security

0 rewiews
Explore the current state of SBOM tools, discussing improvements, standards support, interoperability, and accuracy to enhance software supply chain security.
Add to list
1 Lesons
42 minutes
On-Demand
Free-Video
Linux Foundation

Are We Forever Doomed to Software Supply Chain Security?

0 rewiews
Explore software supply chain security challenges, recent incidents, and strategies for mitigating vulnerabilities in open-source ecosystems. Learn about maintainer account security and registry management.
Add to list
11 Lesons
16 minutes
On-Demand
Free-Video
Linux Foundation

Dependencies: Do's and Don'ts - Managing Application Dependencies Securely

0 rewiews
Learn best practices for managing dependencies in software development, balancing security risks with benefits to team velocity and business value. Discover preventive measures to minimize vulnerabilities.
Add to list
1 Lesons
42 minutes
On-Demand
Free-Video
Linux Foundation

Demystifying Unreproducible Builds: What, Why, and How

0 rewiews
Explore reproducible builds as a defense against software supply chain attacks, understanding their importance and implementation strategies for enhanced security.
Add to list
1 Lesons
23 minutes
On-Demand
Free-Video
Linux Foundation

Securing Your Software Supply Chain

0 rewiews
Explore the current state and future of JavaScript ecosystem security, learn about emerging tools to combat threats, and discover practical strategies to protect your software supply chain.
Add to list
1 Lesons
42 minutes
On-Demand
Free-Video
Linux Foundation

Navigating Open Source and Open Standards for Better Cybersecurity

0 rewiews
Explore the interplay between open source and open standards in cybersecurity, examining their roles in shaping the IT ecosystem and addressing modern software supply chain concerns.
Add to list
1 Lesons
44 minutes
On-Demand
Free-Video
Linux Foundation

Code Genome - Fingerprinting Code to Build Trustworthy SBOMs

0 rewiews
Explore Code Genome, a novel approach to generate and verify Software Bills of Materials (SBOMs) using semantically meaningful fingerprints of code functionality, enhancing software supply chain security.
Add to list
1 Lesons
57 minutes
On-Demand
Free-Video
Linux Foundation

Ketchup, Mustard, and Relish of Software Supply Chain Security - Panel Discussion

0 rewiews
Explore open source standards and tools for enhancing software supply chain security with industry experts. Learn about S2C2F, SLSA, and FRSCA, their benefits, and how to implement them effectively.
Add to list
1 Lesons
46 minutes
On-Demand
Free-Video
Linux Foundation

OmniBOR: Bringing the Receipts for Supply Chain Security

0 rewiews
Explore OmniBOR, a new approach to capture full artifact dependency graphs in software development, enhancing supply chain security and addressing SBOM scanner limitations.
Add to list
47 Lesons
41 minutes
On-Demand
Free-Video
Linux Foundation

Security Advisory Programs: Creating Transparency in Software Supply Chain

0 rewiews
Strategies for implementing transparent security communications programs in software products, addressing customer demands for vulnerability disclosure and open source patching accountability.
Add to list
1 Lesons
39 minutes
On-Demand
Free-Video
Linux Foundation

Bringing Provenance to Open Source - Lessons from Npm's Sigstore Integration

0 rewiews
Explore npm's integration with Sigstore to enhance package provenance, addressing security challenges and implications for the broader open-source ecosystem.
Add to list
1 Lesons
27 minutes
On-Demand
Free-Video
Linux Foundation

Toto-Ally TUF: Simple Tools for a Secure Software Supply Chain

0 rewiews
Learn to secure software supply chains using in-toto and TUF frameworks. Explore their integration, real-world applications, and new open-source tools for enhanced protection against cyber threats.
Add to list
1 Lesons
35 minutes
On-Demand
Free-Video
Linux Foundation

Verifying the Validity of Crowd-Sourced Results in Open Source Security - The Scorecard GitHub Action and Sigstore

0 rewiews
Explore how the Scorecard GitHub Action ensures security in open-source projects, using Sigstore for result integrity and remote attestation in crowd-sourced data validation.
Add to list
1 Lesons
32 minutes
On-Demand
Free-Video
Linux Foundation

SLSA in Action: Securing the Software Supply Chain

0 rewiews
Live demonstration of securing software supply chain and achieving SLSA compliance using sample repo. OpenSSF SLSA group showcases tooling developed to meet SLSA 1.0 Build Specification, offering practical insights into implementation.
Add to list
1 Lesons
40 minutes
On-Demand
Free-Video
Linux Foundation

Software Supply Chain Security Case Study at Anaconda

0 rewiews
Explore real-world experiences in securing a large-scale open-source packaging pipeline, addressing challenges, implementing solutions, and achieving positive outcomes using respected security designs.
Add to list
1 Lesons
43 minutes
On-Demand
Free-Video
Linux Foundation

Where Is the GUAC? - Understanding Artifact Composition in Software Supply Chains

0 rewiews
Explore GUAC: a tool for comprehensive software supply chain analysis, integrating metadata to identify vulnerabilities, assess trust, and enhance security through GraphQL-powered insights.
Add to list
1 Lesons
40 minutes
On-Demand
Free-Video
Linux Foundation

Securing the Software Supply Chain: From Threats to Best Practices

0 rewiews
Comprehensive overview of software supply chain security, covering history, threats, initiatives, challenges, and best practices. Experts discuss key issues and solutions for organizations.
Add to list
23 Lesons
59 minutes
On-Demand
Free-Video
Linux Foundation

Improving Global Software Supply Chain Security with Alpha-Omega Project

0 rewiews
Explore strategies to enhance global software supply chain security through the Alpha-Omega Project, focusing on critical and long-tail open source projects.
Add to list
15 Lesons
22 minutes
On-Demand
Free-Video
Linux Foundation

VEX Overview - Cybersecurity and Infrastructure Security Agency

0 rewiews
Explore VEX with cybersecurity expert Allan Friedman, gaining insights into this crucial aspect of infrastructure security and its implications for modern digital systems.
Add to list
1 Lesons
47 minutes
On-Demand
Free-Video
Linux Foundation

Lessons Learned from Automating SLSA-Compliance Evaluation

0 rewiews
Explore automating SLSA-compliance evaluation, covering provenance, pipeline dynamics, and challenges in implementing various SLSA levels. Gain insights on evidence-based trust and unfalsifiable provenance.
Add to list
27 Lesons
42 minutes
On-Demand
Free-Video
Linux Foundation

Google SLSA and NIST SSDF - Emerging Software Supply Chain Security Best Practices

0 rewiews
Explore emerging best practices for software supply chain security, focusing on Google's SLSA framework and NIST's SSDF guidelines to enhance your organization's cybersecurity posture.
Add to list
1 Lesons
29 minutes
On-Demand
Free-Video
Linux Foundation

What Role Do Package Registries Have in Securing the Supply Chain?

0 rewiews
Explore the critical role of package registries in supply chain security, focusing on their impact, challenges, and best practices for enhancing software integrity and reliability.
Add to list
1 Lesons
41 minutes
On-Demand
Free-Video
Linux Foundation

Road to SLSA3 - Non-falsifiable Provenance in Tekton with SPIFFE/SPIRE

0 rewiews
Explore non-falsifiable provenance in Tekton using SPIFFE/SPIRE, enhancing software supply chain security and achieving SLSA3 compliance.
Add to list
1 Lesons
38 minutes
On-Demand
Free-Video
Linux Foundation

GitBOM - Repurposing Git's Graph for Supply Chain Security and Transparency

0 rewiews
Explore innovative use of Git's graph structure for enhancing software supply chain security and transparency, offering insights into modern cybersecurity practices.
Add to list
1 Lesons
43 minutes
On-Demand
Free-Video
Linux Foundation

Software Supply Chain Threat Landscapes - A Moving Target

0 rewiews
Explore evolving software supply chain threats and learn strategies to protect your organization from vulnerabilities, malicious attacks, and emerging risks in the digital ecosystem.
Add to list
1 Lesons
41 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

Maintaining The Update Framework (TUF) - Insights and Contributions

0 rewiews
Insights into maintaining The Update Framework (TUF) for secure content delivery, covering organization, implementation, and community involvement in software supply chain security.
Add to list
10 Lesons
34 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

Building SLSA 3 Conformant Attestors for Artifacts Generated on GitHub

0 rewiews
Learn to create SLSA 3 compliant attestors for GitHub artifacts, enhancing software supply chain security with minimal effort using recent framework extensions.
Add to list
1 Lesons
34 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

Fight Back Against Cyber Risk in the Software Supply Chain - Secure DevSecOps Pipeline for Regulated Environments

0 rewiews
Secure DevSecOps pipelines for regulated environments: best practices, open-source tools, and real-world application in banking using BIAN framework and technologies like Tekton, Terraform, and SonarQube.
Add to list
10 Lesons
32 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

Filling the Gaps in Kubernetes Flavored SLSA with Threat Modeling

0 rewiews
Explore threat modeling for Kubernetes CI/CD security using SLSA standards. Learn to identify and mitigate vulnerabilities in supply chain processes, with practical insights from Tekton's implementation.
Add to list
1 Lesons
33 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

What Data Tells Us About Software Supply Chain Security and What To Do About It

0 rewiews
Experts analyze data from surveys and reports on cloud-native and open source software security, providing actionable insights to improve software supply chain security for organizations and projects.
Add to list
1 Lesons
32 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

No Keys? No Problem - Why You Can Trust Sigstore Signatures

0 rewiews
Explore Sigstore's keyless code signing, its security measures, and trust mechanisms. Learn how it protects software supply chains using open principles and robust infrastructure.
Add to list
18 Lesons
27 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

Notary: State of Development and Supply Chain Security

0 rewiews
Explore supply chain security with Notary project overview, Notary v2 updates, and ecosystem context. Learn about TUF and in-toto projects and their role in achieving security outcomes.
Add to list
1 Lesons
37 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

Achieving End-to-End Software Supply Chain Security with in-toto

0 rewiews
Explore in-toto's advancements in software supply chain security, including artifact tracking, attestation types, and integrations with CNCF projects for cloud-native identity protection.
Add to list
1 Lesons
35 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

Supply Chain Security: Building a Knowledge Graph for Artifact Relationships

0 rewiews
Explore a supply chain knowledge graph tool that enhances understanding of artifact relationships, enabling better assessment of vulnerabilities and dependencies in software development.
Add to list
1 Lesons
34 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

Building Sigstore Policies from Scratch

0 rewiews
Learn to create and implement Sigstore policies for secure software supply chains, enhancing your project's integrity and trust in the cloud-native ecosystem.
Add to list
1 Lesons
49 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

The Road to SLSA4 - Applying the Sigstore Ecosystem in a Corporate Environment

0 rewiews
Explore Sigstore ecosystem implementation for software artifact integrity, covering self-hosting, keyless signatures, OIDC tokens, and verification methodologies in various environments.
Add to list
13 Lesons
32 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

SLSA with Cosign and Kyverno - Securing Software Delivery in Cloud Native Environments

0 rewiews
Explore SLSA, Cosign, and Kyverno for enhancing software delivery security in cloud-native environments. Learn practical techniques to safeguard your development pipeline.
Add to list
1 Lesons
1 hour
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

Cryptographic Signatures - A Building Block Not A Panacea

0 rewiews
Explore cryptographic signatures in software supply chain security, their benefits, limitations, and effective implementation strategies for cloud-native applications.
Add to list
20 Lesons
20 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

Fighting the Next War - Future Threats to OSS and Software Supply Chain Security

0 rewiews
Explore future threats to open-source software and supply chain security, discussing emerging attack vectors and strategies for OSS projects to prepare and protect against evolving risks.
Add to list
10 Lesons
17 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

Software Supply Chain Security with TAG Security

0 rewiews
Explore software supply chain security with insights on guidance, resources, and recent developments. Learn about the whitepaper, compromise catalog, and reference architecture for secure supply chains.
Add to list
1 Lesons
25 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

SLSA FRSCA Recipe for Secure Supply Chain

0 rewiews
Explore an end-to-end solution for software supply chain security using OpenSSF-FRSCA, integrating tools like Tekton, Sigstore, and Kyverno to meet SLSA Level 3 requirements.
Add to list
1 Lesons
33 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

Verifying Software Signatures with TUF and Sigstore

0 rewiews
Explore secure software verification using TUF and Sigstore. Learn to design effective verification policies, understand signing limitations, and enhance security for open-source repositories and container registries.
Add to list
1 Lesons
36 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

How to Secure Your Supply Chain at Scale

0 rewiews
Learn how Yahoo secures its software supply chain using open-source tools like Grafeas, Sigstore, and Kyverno. Discover strategies for source code scanning, vulnerability management, and protecting Kubernetes deployments at scale.
Add to list
1 Lesons
40 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

SBOMs, VEX, and Kubernetes - Software Supply Chain Security in Cloud Native Environments

0 rewiews
Explore software supply chain security with experts discussing SBOMs, VEX, and their practical applications in Kubernetes environments, from open-source projects to regulated industries.
Add to list
1 Lesons
36 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

In-Toto: Attestations and Software Supply Chain Security

0 rewiews
Explore in-toto framework's advancements in software supply chain security, including attestation verification, type mapping, and integrations with CNCF projects and industry tools.
Add to list
1 Lesons
35 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

Secure Kubernetes Supply Chain: Lessons and Tools for Project Releases

0 rewiews
Explore Kubernetes' enhanced security features for software supply chain, including SBOMs, provenance attestations, and digital signatures. Learn to implement these tools in your projects.
Add to list
1 Lesons
34 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

Secure Your Software Supply Chain Using Observability

0 rewiews
Explore techniques for enhancing software supply chain security through observability, focusing on key benefits and practical implementation strategies.
Add to list
1 Lesons
26 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

Top 5 Reasons and 5 Myths Debunked to Invest in Securing the Software Supply Chain

0 rewiews
Discover key reasons and debunked myths for investing in software supply chain security, with insights on SCIM, SBOM, and SCITT to enhance your SDLC and meet compliance requirements.
Add to list
7 Lesons
22 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

Cloud Native - Protecting Software Supply Chains Using Kyverno

0 rewiews
Explore Kyverno's role in safeguarding software supply chains, enhancing security practices, and ensuring compliance in cloud-native environments.
Add to list
1 Lesons
1 hour 2 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

Putting the Supply Chain Pieces Together: A Deep Dive into the Secure Software Factory

0 rewiews
Explore a deep dive into supply chain security, focusing on implementing CNCF's Secure Software Factory architecture using cloud-native tools to enhance software provenance and artifact trustworthiness.
Add to list
9 Lesons
20 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

Securing the Supply Chain with Witness - A Framework for Supply Chain Security

0 rewiews
Explore Witness, an open-source framework for supply chain security, its trust model, and implementation in CI pipelines. Learn about attestation collections, policy enforcement, and integration with cloud-native tools.
Add to list
11 Lesons
23 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

Using CNCF Best Practices to Enhance Software Supply Chain Security

0 rewiews
Enhance software supply chain security using CNCF best practices. Learn from 3M's journey to improve code security, respond to vulnerabilities, and implement standards-based SBOM.
Add to list
14 Lesons
35 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

Securing Your Container Native Supply Chain with SLSA, GitHub and Tekton

0 rewiews
Practical guide to securing container native supply chains using SLSA principles, in-toto attestations, and step-by-step demos for achieving SLSA Level 2 in Tekton and Github Actions.
Add to list
1 Lesons
32 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

Securing Shopify's Software Supply Chain - Mitigating Supply Chain Attacks

0 rewiews
Explore techniques for securing software supply chains, including cloud-based defenses, trust establishment, and malicious behavior detection, drawing from Shopify's experiences.
Add to list
5 Lesons
16 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

Enforcing Supply Chain Security and Simplifying Compliance Audit for ArgoCD Deployments

0 rewiews
Explore techniques for securing supply chains and simplifying compliance audits in ArgoCD deployments using open-source tools like Guac, Sigstore, and in-toto.
Add to list
1 Lesons
20 minutes
On-Demand
Free-Video
Docker

Mitigating Attacks on Software Supply Chain Using GOSH Docker Extension

0 rewiews
Explore GOSH Docker Extension's innovative features for securing software supply chains, including container verification, decentralized signatures, DAO governance, and automated CI/CD pipeline security.
Add to list
1 Lesons
37 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

Identity-based Source Integrity with Gitsign

0 rewiews
Explore Gitsign, a Sigstore project for keyless, identity-based Git commit signing. Learn its benefits over traditional methods and how it enhances security in CI/CD and GitOps workflows.
Add to list
1 Lesons
29 minutes
On-Demand
Free-Video
CAE in Cybersecurity Community

Securing Software Supply Chains with In-Toto

0 rewiews
Explore in-toto, a framework for securing software supply chains, and learn its implementation strategies for enhancing cybersecurity in software development processes.
Add to list
1 Lesons
33 minutes
On-Demand
Free-Video
Linux Foundation

SPDX 3.0 Update

0 rewiews
Learn about the latest updates and improvements in SPDX 3.0, exploring its enhanced capabilities for software bill of materials (SBOM) and supply chain security.
Add to list
1 Lesons
16 minutes
On-Demand
Free-Video
Linux Foundation

Will Large-Scale Automated Scanning Stop Malware on OSS Repositories?

0 rewiews
Explore challenges of automated malware scanning in open-source repositories, focusing on PyPI's experience. Learn why current approaches fall short and discover emerging solutions for effective package security.
Add to list
1 Lesons
41 minutes
On-Demand
Free-Video
Linux Foundation

Growing the Chain: Trusting Build Provenance from Userspace

0 rewiews
Explore techniques for establishing trust in CI/CD workflows, focusing on artifact signing, provenance generation, and building a chain of trust using open-source technologies like Sigstore and OIDC.
Add to list
1 Lesons
33 minutes
On-Demand
Free-Video
Rawkode Academy

Hands-on Introduction to Sigstore - Securing the Software Supply Chain

0 rewiews
Comprehensive introduction to sigstore, covering container image signing, keyless mode, transparency logs, and image policy enforcement with Kyverno for enhanced software supply chain security.
Add to list
7 Lesons
1 hour 8 minutes
On-Demand
Free-Video
LASCON

Drivers for Software Supply Chain Security Programs

0 rewiews
Explore software supply chain security concerns, drivers, and strategies based on a survey of 300 tech executives. Gain insights into current issues and learn programmatic approaches to address risks.
Add to list
1 Lesons
51 minutes
On-Demand
Free-Video
LASCON

Lessons Learned Building a Software Supply Chain Security Team

0 rewiews
Insights on building a software supply chain security function, exploring the role of SBOMs and addressing challenges in implementing effective security measures.
Add to list
1 Lesons
56 minutes
On-Demand
Free-Video
Security BSides San Francisco

Snow Nor Rain Nor Dependency Confusion - How to Deliver the Right Package

0 rewiews
Practical insights on identifying, exploiting, and fixing dependency confusion vulnerabilities in real-world package environments, based on firsthand experience.
Add to list
1 Lesons
30 minutes
On-Demand
Free-Video
CNCF [Cloud Native Computing Foundation]

A Mouthful of Mayhem: Taste Test and Gut Response to SLSA, GUAC, and Supply Chain Security

0 rewiews
Explore popular supply chain security ingredients and learn how to combine them effectively to address threats in your organization's ecosystem.
Add to list
1 Lesons
36 minutes
On-Demand
Free-Video
OpenSSF

The Current State of Open Source Security Compliance Tooling Is Well, Sad

0 rewiews
Explore practical approaches to improve software supply chain security using OpenSSF projects, open source tools, and open data for automated compliance and robust processes.
Add to list
1 Lesons
18 minutes
On-Demand
Free-Video
OpenSSF

Automated End-to-End VEX Streams You Can Trust

0 rewiews
Explore automated VEX streams for trusted vulnerability communication. Learn to build end-to-end systems using OpenVEX, enhancing software security without human intervention.
Add to list
1 Lesons
19 minutes
On-Demand
Free-Video
OWASP Foundation

Cryptographic Governance - Software Supply Chain Security with CBOM

0 rewiews
Explore software supply chain security using Cryptographic Bill of Materials (CBOM) for enhanced governance and risk mitigation in development processes.
Add to list
1 Lesons
32 minutes
On-Demand
Free-Video
OWASP Foundation

OWASP Dependency Track - Fortifying the Software Supply Chain

0 rewiews
Explore strategies to secure software supply chains using OWASP Dependency Track, a powerful tool for identifying and mitigating vulnerabilities in third-party components.
Add to list
1 Lesons
24 minutes
On-Demand
Free-Video
DevConf

The Internet is Broken: Breaking Down the Software Supply Chain

0 rewiews
Explore modern software vulnerabilities, recent supply chain attacks, and actionable steps to build secure applications in an insecure internet environment.
Add to list
1 Lesons
31 minutes
On-Demand
Free-Video