CNCF [Cloud Native Computing Foundation] Courses

Teach Your SBOM New Tricks with Bomshell

Explore bomshell, a scripting language for SBOM based on CEL. Learn to query, combine, and reshape SBOM documents across formats, enhancing compatibility and streamlining ingestion processes.

• YouTube
• 38 minutes
• Self-Paced
• Free Video

Automating Configuration and Management of GitHub Repositories with Minder

Learn to automate GitHub repository management using Minder, an open-source platform. Write custom Rego rules to enforce security policies across multiple repositories, enhancing supply chain security.

• YouTube
• 59 minutes
• Self-Paced
• Free Video

Demystify Modern Signing: Keys, Certificates, and Envelopes

Explore practical aspects of cryptographic signing tools, covering key algorithms, signing envelopes, certificates, and verification, with a focus on identity-based signing using short-lived keys.

• YouTube
• 33 minutes
• Self-Paced
• Free Video

Is the Internet on Fire? Strategies for Mitigating Open Source Software Vulnerabilities

Explore strategies for mitigating open source software vulnerabilities, including supply chain attacks, SBOMs, and next-generation security controls for robust defense and compromise resilience.

• YouTube
• 32 minutes
• Self-Paced
• Free Video

Kubernetes Deep Dive - Elevating ML Workload Monitoring to Art

Explore strategies for optimizing AI/ML workloads in Kubernetes, combining node health assurance with advanced monitoring techniques. Learn to implement robust detection, recovery, and performance analytics for resilient environments.

• YouTube
• 24 minutes
• Self-Paced
• Free Video

Brave New World - Welcoming New AI Identity Challenges

Explore AI identity challenges in digital systems, examining differences between AI and human identities, and learn about building auth systems for the AI era using open-source software.

• YouTube
• 32 minutes
• Self-Paced
• Free Video

Network ACLs Made Easy: Establishing Zero Trust Network Policies

Learn to automate Zero Trust network policies using AWS VPC Flow Logs and Terraform. Discover techniques for analyzing traffic data, optimizing security groups, and implementing efficient access controls without third-party solutions.

• YouTube
• 33 minutes
• Self-Paced
• Free Video

Shift Down Security - How Platform Teams Can Help Break the Logjam

Explore how platform engineering and cloud native practices can automate security using policy as code, enabling developers and security teams to focus on their core competencies.

• YouTube
• 38 minutes
• Self-Paced
• Free Video

Threat Modeling for AI Apps with Attacks as Code

Explore automated threat modeling for AI apps using Secops-Chaos framework. Learn to encode TTPs as security experiments and map MITRE ATLAS TTPs to AI apps in Kubernetes environments.

• YouTube
• 25 minutes
• Self-Paced
• Free Video

Implementing AI Risk Management Framework with Policy-as-Code Automation

Explore AI risk assessment, compliance, and red teaming for Kubernetes-deployed AI models. Learn to implement LinuxFoundation Trusted AI Principles using policy-as-code templates and CNCF open source tools.

• YouTube
• 35 minutes
• Self-Paced
• Free Video

Decoding 8 Real-World Cloud Identity Breaches

Dissection of 8 real cloud breaches exploiting insecure identities, revealing insights and mitigation strategies for common IAM vulnerabilities in cloud environments.

• YouTube
• 36 minutes
• Self-Paced
• Free Video

Sailing the Security Seas with Tetragon Tutorial

Explore Tetragon for runtime security: learn to filter and examine events, strengthen defenses against intrusions, and gain hands-on experience using the tetra CLI in this interactive tutorial.

• YouTube
• 1 hour 12 minutes
• Self-Paced
• Free Video

Scan, Patch, VEX - Using Open Source Tools to Manage Vulnerabilities in Containers

Learn to manage vulnerabilities in cloud-native environments using open-source tools like Trivy and Copacetic, and standards like VEX. Improve security across development, testing, and production.

• YouTube
• 42 minutes
• Self-Paced
• Free Video

From Risks to Resilience: Leveraging CNCF Projects Against Kubernetes' OWASP Top 10

Explore strategies to mitigate OWASP Kubernetes Top Ten security risks using CNCF projects. Learn actionable insights to enhance the security of your Kubernetes deployments.

• YouTube
• 38 minutes
• Self-Paced
• Free Video

Bridging Mesh Enclaves - Securing and Maintaining Mesh Heterogeneity

Explore secure workload connections across service mesh technologies using SPIFFE and SPIRE. Learn to maintain technical heterogeneity while implementing universal workload security in complex software architectures.

• YouTube
• 31 minutes
• Self-Paced
• Free Video