Strengthening Supply Chain for Kubernetes - Cross-Cloud SLSA Attestation Verification

Learn how to strengthen Kubernetes supply chain security through cross-cloud SLSA attestation verification in this conference talk from maintainers at Microsoft Azure and Alibaba Cloud. Discover the critical importance of verifying container image provenance and integrity as software supply chain threats continue to escalate, and explore how the SLSA framework provides standardized artifact attestations for securing Kubernetes workloads. Understand the practical challenges organizations face when implementing attestation verification in controlled or restricted environments, particularly during deployment time. Explore upcoming support for SLSA attestation verification in the Notary Project and Ratify, two open-source tools that enable policy-based verification of OCI artifact attestations. See demonstrations of how these solutions work across different cloud providers and on-premise environments, making them adaptable for various enterprise and Kubernetes deployment scenarios. Gain insights into implementing robust supply chain security measures that can protect your Kubernetes infrastructure from emerging threats while maintaining operational flexibility across diverse cloud environments.