Class Central is learner-supported. When you buy through links on our site, we may earn an affiliate commission.

CNCF [Cloud Native Computing Foundation]

The Road to SLSA4 - Applying the Sigstore Ecosystem in a Corporate Environment

CNCF [Cloud Native Computing Foundation] via YouTube

Start learning Write review
Noble Desktop Ad

Live Online Classes in Design, Coding & AI — Small Classes, Free Retakes

Learn More → Coursera Ad

Learn AI, Data Science & Business — Earn Certificates That Get You Hired

Learn More →

Overview

Google, IBM & Meta Certificates – 40% Off
One Coursera Plus subscription covers most Professional Certificates on Coursera.
Unlock All Certificates
This talk explains how to integrate Sigstore into a corporate environment to sign and verify commits and software artifacts across cloud, self-hosted, and on-prem build systems. It covers keyless signing, workload identities, and the trade-offs of self-hosting Fulcio and Rekor.

Syllabus

Intro
Agenda
Motivation? Sign Everything!
What is Fulcio
Hello (World) Signing
Hello (World) Commit Signing
Real-world scenario
Architecture - Pre Sigstore
Github Actions - Result
Gitlab Runner on K8s
Implementation
Insights
Takeaways

Taught by

CNCF [Cloud Native Computing Foundation]

Reviews

Start your review of The Road to SLSA4 - Applying the Sigstore Ecosystem in a Corporate Environment

Start learning

Never Stop Learning.

Get personalized course recommendations, track subjects and courses with reminders, and more.

Sign up for free
Someone learning on their laptop while sitting on the floor.