Cosign Courses and Certifications

Securing Your Software Supply Chain with Sigstore

Enhance software supply chain security with Sigstore tools. Learn to sign, verify, and secure artifacts using Cosign, Fulcio, Rekor, and Policy Controller for tamper-resistant, verifiable software distribution.

• edX
• 7 weeks, 1-2 hours a week
• On-Demand
• Free Online Course (Audit)

Rawkode Academy

Hands-on Introduction to Sigstore - Securing the Software Supply Chain

Comprehensive introduction to sigstore, covering container image signing, keyless mode, transparency logs, and image policy enforcement with Kyverno for enhanced software supply chain security.

• YouTube
• 1 hour 8 minutes
• On-Demand
• Free Online Course

Growing the Chain: Trusting Build Provenance from Userspace

Explore techniques for establishing trust in CI/CD workflows, focusing on artifact signing, provenance generation, and building a chain of trust using open-source technologies like Sigstore and OIDC.

• YouTube
• 33 minutes
• On-Demand
• Free Online Course

Attesting Practically: Exploring the Glue Behind Secure Runtime Environments

Explore practical applications of attestations in software supply chain security, focusing on Cosign, in-toto, and VEX to create secure, auditable runtime environments and effectively manage security threats.

• YouTube
• 40 minutes
• On-Demand
• Free Online Course

Software Supply Chain Integrity with Sigstore

Learn about Sigstore, a tool for securing software supply chains, with demos on Cosign for signing and verifying artifacts, and insights on its practical applications.

• YouTube
• 23 minutes
• On-Demand
• Free Online Course

CNCF [Cloud Native Computing Foundation]

Making Sense of Security Supply Chain - An Overview for Beginners

Explore supply chain security fundamentals, tools like Fulcio, Rekor, and cosign, and their integration in this beginner-friendly overview of the rapidly evolving landscape.

• YouTube
• 24 minutes
• On-Demand
• Free Online Course

CNCF [Cloud Native Computing Foundation]

Harbor - Enterprise Cloud Native Artifact Registry

Explore advanced features of Harbor, an open-source registry for cloud-native artifacts. Learn about image signatures, cloud management, unified Helm and container handling, and high-availability deployments.

• YouTube
• 36 minutes
• On-Demand
• Free Online Course

CNCF [Cloud Native Computing Foundation]

SLSA with Cosign and Kyverno - Securing Software Delivery in Cloud Native Environments

Explore SLSA, Cosign, and Kyverno for enhancing software delivery security in cloud-native environments. Learn practical techniques to safeguard your development pipeline.

• YouTube
• 1 hour
• On-Demand
• Free Online Course

CNCF [Cloud Native Computing Foundation]

Platform Driven Compliance with Sigstore at Autodesk

Explore Autodesk's innovative approach to software supply chain security using Sigstore, enhancing trust and compliance for hybrid desktop and cloud solutions across diverse deployment environments.

• YouTube
• 20 minutes
• On-Demand
• Free Online Course

CNCF [Cloud Native Computing Foundation]

Securing Kubernetes Manifests with Sigstore and Kyverno

Learn to secure Kubernetes resources using Sigstore for signing YAML definitions and Kyverno for verification during admission controls, with real-world use cases for tamper-prevention and approval workflows.

• YouTube
• 22 minutes
• On-Demand
• Free Online Course

Modernizing Image Security in CI/CD with Cosign and OPA

Explore Cosign for image signing and OPA for policy enforcement in CI/CD pipelines. Learn implementation strategies and see a hands-on demo for securing Kubernetes deployments.

• YouTube
• 48 minutes
• On-Demand
• Free Online Course

CNCF [Cloud Native Computing Foundation]

Securing the Supply Chain: A Practical Guide to SLSA Compliance from Build to Runtime

Practical guide to securing software supply chain using CNCF tools. Covers SLSA compliance, GitHub Actions, Cosign, Kyverno, in-toto, and Kubescape for build-to-runtime security in Kubernetes ecosystems.

• YouTube
• 34 minutes
• On-Demand
• Free Online Course

Devoxx

Practical Guides for Enhancing Your Software Supply Chain Security

Practical guide to fortify software supply chain security using open-source tools. Covers building, packaging, dependencies, code scanning, and establishing trust across the delivery process.

• YouTube
• 35 minutes
• On-Demand
• Free Online Course

CNCF [Cloud Native Computing Foundation]

Trust in Honk, Tie Up Your YAML - A Kpack Experience for Container Image Building

Explore kpack for building container images on Kubernetes, leveraging Cloud Native Buildpacks and enhancing supply chain security through declarative resources and automated processes.

• YouTube
• 29 minutes
• On-Demand
• Free Online Course

CNCF [Cloud Native Computing Foundation]

Demystify Modern Signing: Keys, Certificates, and Envelopes

Explore practical aspects of cryptographic signing tools, covering key algorithms, signing envelopes, certificates, and verification, with a focus on identity-based signing using short-lived keys.

• YouTube
• 33 minutes
• On-Demand
• Free Online Course