Securing the Container Supply Chain with Notary, TUF, and Gatekeeper
Offered By: Linux Foundation via YouTube
Course Description
Overview
Explore container supply chain security in this 27-minute conference talk by Katie Novotny and Diego Casati from Microsoft. Delve into the importance of securing processes and controlling container workflows in light of recent software supply chain vulnerabilities. Learn about digital signatures as a method to ensure code integrity and compare various options for signing container images. Follow a demonstration using Notary, an open-source project based on The Update Framework (TUF), Gatekeeper, a customizable admission webhook for Kubernetes, and Ratify, a workflow engine for supply chain object verification. Discover how to implement these technologies in a typical CI/CD process and enforce policies in Kubernetes clusters. Gain insights into protecting your container deployments from potential malicious code intrusions.
Syllabus
Never Break the Chain: Securing the Container Supply Chain with... - Katie Novotny & Diego Casati
Taught by
Linux Foundation
Tags
Related Courses
Toto-Ally TUF: Simple Tools for a Secure Software Supply ChainLinux Foundation via YouTube Software Supply Chain Security Case Study at Anaconda
Linux Foundation via YouTube Improving Package Repository Security - From White Papers to Practice
Linux Foundation via YouTube Container Security: Supply Chain, Authorization, and Runtime Protection
Docker via YouTube Using Docker Content Trust with Kubernetes Admission Controllers to Secure Runtime
Docker via YouTube