Explore a demonstration of Archivista using The Update Framework (TUF) to store policy and build trust in verifying in-toto attestations. Learn how to verify the production process and tools used in software development. This 26-minute conference talk, presented by Kairo de Araujo at the CNCF Security Hub Unconference, offers insights into enhancing software supply chain security through advanced verification techniques.
Archivista: Using TUF to Store Policy and Verify In-toto Attestations - Demo
CNCF [Cloud Native Computing Foundation] via YouTube
Overview
Syllabus
SECURITY HUB | Unconference: DEMO: Archivista using TUF to store Policy & buildin... Kairo de Araujo
Taught by
CNCF [Cloud Native Computing Foundation]
Related Courses
-
Toto-Ally TUF: Simple Tools for a Secure Software Supply Chain
-
State of the Art Supply Chain Security - In-toto, TUF, and SigStore
-
Verifying Software Signatures with TUF and Sigstore
-
In-Toto: Attestations and Software Supply Chain Security
-
Enforceable Software Supply Chain Policies and Attestations Using in-Toto
-
TUF-En Up Your Signatures - Enhancing Software Distribution Security
