Zero Trust Supply Chains with Project Sigstore and SPIFFE
CNCF [Cloud Native Computing Foundation] via YouTube
Start speaking a new language. It’s just 3 weeks away.
AI, Data Science & Cloud Certificates from Google, IBM & Meta
Overview
Google, IBM & Meta Certificates – 40% Off
One Coursera Plus subscription covers most Professional Certificates on Coursera.
Unlock All Certificates
This presentation demonstrates a federated, verifiable software supply chain using Sigstore and SPIRE to establish identities and verify artifact provenance. TektonCD is the example build system, with in-toto as the provenance format.
Syllabus
Zero Trust Supply Chains with Project Sigstore and SPIFFE - Andres Vega & Jake Sanders
Taught by
CNCF [Cloud Native Computing Foundation]