Road to SLSA3 - Non-falsifiable Provenance in Tekton with SPIFFE/SPIRE
Offered By: Linux Foundation via YouTube
Course Description
Overview
Explore the implementation of non-falsifiable provenance in Tekton using SPIFFE/SPIRE in this 38-minute conference talk presented by Parth Patel from IBM and Brandon Lum from Google. Delve into the journey towards achieving Supply Chain Levels for Software Artifacts (SLSA) Level 3 compliance, focusing on enhancing software supply chain security. Learn about the integration of SPIFFE (Secure Production Identity Framework for Everyone) and SPIRE (SPIFFE Runtime Environment) within the Tekton CI/CD framework to establish robust, tamper-resistant provenance for software artifacts. Gain insights into the challenges, solutions, and best practices for implementing these security measures in modern software development pipelines.
Syllabus
Road to SLSA3: Non-falsifiable Provenance in Tekton with SPIFFE/SPIRE - Parth Patel & Brandon Lum
Taught by
Linux Foundation
Tags
Related Courses
Look Ma, No Secrets - Establishing Trust Between Workloads with SPIFFE and SPIREISTA Conference via YouTube Lessons From Migrating to SPIFFE After 10 Years of Service Identity at Square
CNCF [Cloud Native Computing Foundation] via YouTube Achieving End-to-End Software Supply Chain Security with in-toto
CNCF [Cloud Native Computing Foundation] via YouTube Beyond Kubernetes with Linkerd 2.15 and SPIFFE
CNCF [Cloud Native Computing Foundation] via YouTube Bridging Mesh Enclaves - Securing and Maintaining Mesh Heterogeneity
CNCF [Cloud Native Computing Foundation] via YouTube