Explore cloud native supply chain security in this 22-minute conference talk from KubeCon + CloudNativeCon Europe 2022. Learn how to create a secure zero-trust supply chain on Kubernetes using tools like Tekton, Tekton Chains, and Sigstore. Discover hands-on techniques for protecting pipelines and generating provenance for builds. Gain insights into integrating these tools with projects such as In-Toto and SPIRE to securely build, sign, and verify software components. Perfect for developers and end-users working with Kubernetes who want to enhance their software building security practices.
Cloud Native Supply Chain Security with Tekton and Sigstore
CNCF [Cloud Native Computing Foundation] via YouTube
Overview
Syllabus
Cloud Native Supply Chain Security with Tekton and Sigstore - Priya Wadhwa & Christie Wilson, Google
Taught by
CNCF [Cloud Native Computing Foundation]
Related Courses
-
Securing Your Software Supply Chain with Sigstore
-
Achieving End-to-End Software Supply Chain Security with in-toto
-
Securing Your Container Native Supply Chain with SLSA, GitHub and Tekton
-
Kubernetes Security: Implementing Supply Chain Security
-
In-Toto: Attestations and Software Supply Chain Security
-
Kubernetes Supply Chain Security - Building a Secure Software Factory
