Class Central is learner-supported. When you buy through links on our site, we may earn an affiliate commission.

CNCF [Cloud Native Computing Foundation]

Where Does Your Software Really Come From - Artifact Attestations and Open Source Verification

CNCF [Cloud Native Computing Foundation] via YouTube

Start learning Write review
DataCamp Ad

PowerBI Data Analyst - Create visualizations and dashboards from scratch

Learn More → Destination Certification Ad

CISSP MasterClass with a true CAT exam simulator

Learn More →

Overview

Google, IBM & Meta Certificates – 40% Off
One Coursera Plus subscription covers most Professional Certificates on Coursera.
Unlock All Certificates
This talk examines how artifact attestations can establish verifiable provenance for software and its dependencies. It covers GitHub’s work with the open-source community to build the capability, including a new signing authority and verification with the gh CLI.

Syllabus

Where Does Your Software (Really) Come from? - Trevor Rosen, GitHub

Taught by

CNCF [Cloud Native Computing Foundation]

Reviews

Start your review of Where Does Your Software Really Come From - Artifact Attestations and Open Source Verification

Start learning

Never Stop Learning.

Get personalized course recommendations, track subjects and courses with reminders, and more.

Sign up for free
Someone learning on their laptop while sitting on the floor.