Ozzie and Nova - Supply Chain Shenanigans: A Kubernetes Security Play About OpenSSF Standards

Explore Kubernetes supply chain security vulnerabilities through a fictional but technically grounded narrative following Ozzie's seemingly secure cluster under attack. Follow along as attackers quietly replace container images, swap trusted bases, and hide backdoors among vulnerability floods, exposing critical blind spots in supply chain security including absent image verification, build process gaps, and scanning limitations. Learn how tools like Sigstore, SLSA, SBOMs, and OpenVEX work together in practice to address real-world security challenges when the pipeline itself becomes the target, moving beyond theoretical checklists to examine what genuine security looks like in Kubernetes environments with strict RBAC, GitOps deployments, MFA, service mesh, admission controls, and runtime security tools.