November 15, 2024 · KubeCon + CloudNativeCon North America 2024
Practical supply chain security with SLSA
End-to-end implementation patterns for SLSA compliance using GitHub Actions, Cosign, Kyverno, in-toto, and Kubescape.
Software Supply Chain Security
Hands-on guidance for SLSA, Sigstore and Cosign, build provenance, attestations, admission policy, and secure CI/CD.
Talks about Software Supply Chain Security
August 21, 2024 · KubeCon + CloudNativeCon + Open Source Summit China 2024
Securing the supply chain with SLSA
A practical, beginner-friendly walkthrough of SLSA-focused supply chain security from build pipelines to Kubernetes runtime enforcement.