Filling the Gaps in Kubernetes Flavored SLSA with Threat Modeling

This talk uses Tekton as a case study to threat model CI/CD execution on Kubernetes, identify exploitable trust boundaries, and map them to SLSA standards. It demonstrates Tekton’s use of Sigstore and SPIRE to address supply chain threats to artifact building.