Containers, Code, and Chaos - Securing the CI/CD Supply Chain

Learn to secure CI/CD pipelines and protect against supply chain attacks in this 15-minute conference talk by exploring container security, policy-driven automation, and continuous monitoring. Discover how to implement tools like In-Toto, Notary, and Scorecard to safeguard your software supply chain from development to deployment. Master techniques for securing container lifecycles, implementing automated security checks in CI/CD workflows, and establishing continuous validation and traceability systems. Understand how to shift security left to catch vulnerabilities early and build resilient, secure CI/CD workflows with comprehensive container security measures at their foundation.