Beyond Guidelines - Designing and Implementing Robust Build Pipelines

Explore the design and implementation of robust build pipelines in this 41-minute conference talk from the Linux Foundation. Delve into the rising importance of supply chain security and the challenges organizations face in implementing abstract guidelines from NIST, CNCF, and OpenSSF. Learn how to organize security requirements and select appropriate tools and methods to meet them. Discover a more secure build pipeline design based on FRSCA, which follows CNCF's Software Supply Chain Best Practices. Gain insights into the concept of robust build pipeline design and witness its practical implementation through demonstrations.

Beyond Guidelines - Designing & Implementing Robust Build Pipelines - Non Kawana & Keisuke Matsumoto