Securing Content Distribution with RSTUF, an Incubating OpenSSF Project
Offered By: OpenSSF via YouTube
Course Description
Overview
Explore a conference talk on securing content distribution using RSTUF, an incubating OpenSSF project. Learn about The Update Framework (TUF) and its challenges in integrating with existing repositories. Discover how Repository Service for TUF (RSTUF) aims to simplify TUF adoption for content repositories. Gain insights into RSTUF's recent promotion to "incubating" status and its latest developments. Examine real-world use cases, including PyPI and RubyGens' adoption of RSTUF for securing package repositories, RSTUF's application in private repositories, and Archivista's use of RSTUF for securing in-toto attestation storage.
Syllabus
Securing Content Distribution with RSTUF, an Incubating OpenSSF... Kairo De Araujo & Martin Vrachev
Taught by
OpenSSF
Related Courses
Security Is an Ecosystem - We Can't Be Secure in IsolationLinux Foundation via YouTube Improving the Security of a Large Open Source Project One Step at a Time
Linux Foundation via YouTube Simplifying Coordinating Vulnerabilities and Disclosures in Open Source Projects
Linux Foundation via YouTube SLSA in Action: Securing the Software Supply Chain
Linux Foundation via YouTube Implementing OpenSSF Best Practices Badges and Scorecards for Project Security
Linux Foundation via YouTube