Supply Chain Security in Kubernetes

Explore the critical aspects of securing application workloads on Kubernetes in this DevConf.CZ 2024 conference talk. Delve into the world of Supply Chain Security toolsets and their role in safeguarding the software development lifecycle (SDLC). Learn how these tools manage risks and vulnerabilities by integrating continuous safety measures within a DevOps ecosystem. Discover Tekton Chains, a new Supply Chain Security project within the Tekton suite, known primarily for its CI/CD capabilities. Gain practical insights on verifying image provenance and signatures before deployment on a Kubernetes cluster. Presented by Carmelo Sarta, this 24-minute talk offers valuable knowledge for developers and security professionals looking to enhance their Kubernetes security practices.