Building Images for the Secure Supply Chain
Offered By: CNCF [Cloud Native Computing Foundation] via YouTube
Course Description
Overview
Explore techniques and tools for building secure container images in this informative conference talk. Learn about the distroless philosophy, the importance of updating images and dependencies, and how to use apko for building container images with SBOMs and complete reproducibility. Discover the benefits of signing images with Sigstore and how these security measures can simplify and speed up your systems. Gain valuable insights into addressing common security concerns, improving SLSA levels, and enhancing the overall security of your supply chain without compromising usability or productivity.
Syllabus
Building Images for the Secure Supply Chain - Adrian Mouat, Chainguard
Taught by
CNCF [Cloud Native Computing Foundation]
Related Courses
Securing Your Software Supply Chain with SigstoreLinux Foundation via edX A Beginner's View of Public Instances
OpenSSF via YouTube Achieving End-to-End Software Supply Chain Security with in-toto
CNCF [Cloud Native Computing Foundation] via YouTube An Introduction to Sigstore for Pythonistas
DevConf via YouTube Bringing Provenance to Open Source - Lessons from Npm's Sigstore Integration
Linux Foundation via YouTube