Archivista: Using TUF to Store Policy and Verify In-toto Attestations - Demo

Overview

Explore a demonstration of Archivista using The Update Framework (TUF) to store policy and build trust in verifying in-toto attestations. Learn how to verify the production process and tools used in software development. This 26-minute conference talk, presented by Kairo de Araujo at the CNCF Security Hub Unconference, offers insights into enhancing software supply chain security through advanced verification techniques.

Syllabus

SECURITY HUB | Unconference: DEMO: Archivista using TUF to store Policy & buildin... Kairo de Araujo

Taught by

CNCF [Cloud Native Computing Foundation]

Reviews

Start your review of Archivista: Using TUF to Store Policy and Verify In-toto Attestations - Demo

Taught by

Toto-Ally TUF: Simple Tools for a Secure Software Supply Chain

State of the Art Supply Chain Security - In-toto, TUF, and SigStore

Verifying Software Signatures with TUF and Sigstore

In-Toto: Attestations and Software Supply Chain Security

Secure Release Processes with in-Toto Policy Verification

Enforceable Software Supply Chain Policies and Attestations Using in-Toto

Never Stop Learning.