Notary v2 - Supply Chain Security for Containers
CNCF [Cloud Native Computing Foundation] via YouTube
Overview
Syllabus
Intro
Why Notary v2
Cloud native software
Container security
Notary v2 requirements
Work in progress
Pipeline security
Demo
Add Docker plugin
Create alias
Support ephemeral clients
Discover artifacts
Push artifacts into the registry
Docker image pull
Worlds Most Simple Assessment
Sbomb
Reference Graph
Where to find us
Taught by
CNCF [Cloud Native Computing Foundation]