SLSA FRSCA Recipe for Secure Supply Chain
Offered By: CNCF [Cloud Native Computing Foundation] via YouTube
Course Description
Overview
Explore an end-to-end solution for securing the software supply chain in this conference talk by Parth Patel and Michael Lieberman from Kusari. Discover how the OpenSSF - FRSCA implements CNCF best practices to protect build systems, secure ingestion, and enforce policies in production environments. Learn about the integration of Tekton Pipelines/Chains, Sigstore, SPIFFE/SPIRE, and Kyverno to create a holistic approach meeting SLSA Level 3 requirements. Understand how CUE, admission controllers, and short-lived certificates can cryptographically protect clusters based on policy. Gain insights into binary authorization and how FRSCA validates signatures and attestations for authorization until the next release cycle. Explore this implementable architecture designed for the open source community and end-user organizations to produce and ingest SLSA compliant artifacts, addressing the multiple threats in the software supply chain ecosystem.
Syllabus
SLSA FRSCA Recipe For Secure Supply Chain - Parth Patel & Michael Lieberman, Kusari
Taught by
CNCF [Cloud Native Computing Foundation]
Related Courses
Ketchup, Mustard, and Relish of Software Supply Chain Security - Panel DiscussionLinux Foundation via YouTube SLSA in Action: Securing the Software Supply Chain
Linux Foundation via YouTube Securing Your Supply Chain by Building with FRSCA
Linux Foundation via YouTube Open Tools for Secure Supply Chains in Kubernetes - From Release Engineering
Linux Foundation via YouTube Google SLSA and NIST SSDF - Emerging Software Supply Chain Security Best Practices
Linux Foundation via YouTube