YoVDO

Securing the Software Supply Chain with the In-toto and SPIRE Projects

Offered By: CNCF [Cloud Native Computing Foundation] via YouTube

Tags

Conference Talks Courses iOS Development Courses Software Supply Chain Security Courses SPIRE Courses in-toto Courses

Course Description

Overview

Save Big on Coursera Plus. 7,000+ courses at $160 off. Limited Time Only!
Explore the critical aspects of securing the software supply chain in this 20-minute conference talk. Learn about the in-toto and SPIRE projects, and their role in addressing current gaps in open-source ecosystems. Discover how to implement a cryptographically attestable software pipeline with automated certificate issuance. Delve into topics such as Zero Trust Architecture, CICD Pipeline, and Evidence-based Trust. Gain insights into SPIRE's functionality and witness a practical demonstration. This presentation, delivered by Cole Kennedy and Mikhail Swift from BoxBoat Technologies at KubeCon + CloudNativeCon North America 2021, offers valuable knowledge for developers and end-users of CNCF-hosted projects like Kubernetes, Prometheus, and Envoy.

Syllabus

Introduction
The problem at hand
Zero Trust Architecture
CICD Pipeline
Evidencebased Trust
How does it work
What is SPIRE
How SPIRE works
Demo


Taught by

CNCF [Cloud Native Computing Foundation]

Related Courses

Securing Your Infrastructure as Code Pipeline
Linux Foundation via YouTube Toto-Ally TUF: Simple Tools for a Secure Software Supply Chain
Linux Foundation via YouTube Software Supply Chain Security Case Study at Anaconda
Linux Foundation via YouTube Container Security: Supply Chain, Authorization, and Runtime Protection
Docker via YouTube In-Toto: Attestations and Software Supply Chain Security
CNCF [Cloud Native Computing Foundation] via YouTube