CNCF [Cloud Native Computing Foundation] Courses

Level Up Your Security Career with the TAG Security Community

Discover how to advance your security career through CNCF's TAG Security community. Learn about project security, whitepapers, threat modeling, and industry trends while collaborating with experts.

• YouTube
• 36 minutes
• Self-Paced
• Free Video

Where Does Your Software Really Come From - Artifact Attestations and Open Source Verification

Explore GitHub's Artifact Attestations: a new capability for verifying open source software origins, enhancing transparency and security in the OSS ecosystem.

• YouTube
• 36 minutes
• Self-Paced
• Free Video

How to Generate VEX Automatically for Your Project

Learn to automate VEX generation for Kubernetes workloads, reducing false positives in security scans and streamlining vulnerability management using Kubescape and a new GitHub Action.

• YouTube
• 33 minutes
• Self-Paced
• Free Video

Learn to Navigate the Perils and Pitfalls of Multi-Tenant Identity Infrastructure

Explore challenges and solutions in multi-tenant identity management for B2B, B2C, and M2M environments, focusing on security, user experience, and balancing isolation with resource sharing.

• YouTube
• 22 minutes
• Self-Paced
• Free Video

Implementing Transaction Tokens with Keycloak for API Request Authentication

Explore implementing Transaction Tokens with Keycloak for secure API authentication in cloud-native architectures, addressing token redirect attacks and enabling call chain identification for internal workloads.

• YouTube
• 37 minutes
• Self-Paced
• Free Video

How to Secure and Observe with Cilium - Different Angles

Explore Cilium's evolution from CNI to multi-faceted project offering Service Mesh, Hubble, and Tetragon. Learn common use cases for securing applications using the Cilium family of projects.

• YouTube
• 22 minutes
• Self-Paced
• Free Video

Amplifying Impact: Documentation and Supply Chain Security

Explore how high-quality documentation enhances security practices, based on DORA research. Learn measurement techniques, key findings, and strategies to improve documentation for better security outcomes.

• YouTube
• 43 minutes
• Self-Paced
• Free Video

End-to-End Encryption for Container Checkpointing in Kubernetes

Explore end-to-end encryption for container checkpointing in Kubernetes, addressing security risks and best practices to protect sensitive data during runtime state preservation.

• YouTube
• 32 minutes
• Self-Paced
• Free Video

User Namespaces in Kubernetes - Security and Flexibility

Explore user namespaces in Kubernetes 1.30 beta, enhancing security and flexibility. Learn concepts, mitigate vulnerabilities, and run Docker inside containers without privileged mode.

• YouTube
• 40 minutes
• Self-Paced
• Free Video

Shadow Vulnerabilities in AI/ML Data Stacks - What You Don't Know Can Hurt You

Explore hidden security risks in AI/ML data stacks, focusing on open-source vulnerabilities, RCE issues, and security anti-patterns. Learn about new checkpoint formats and runtime-based detection methods using eBPF.

• YouTube
• 37 minutes
• Self-Paced
• Free Video

Guardians of the Dataverse - Securing the AI Supply and Data Chain

Explore strategies to secure AI/ML and Big Data pipelines, leveraging insights from NIST SP 800-204D and CNCF projects to protect critical AI workflows and sensitive data.

• YouTube
• 34 minutes
• Self-Paced
• Free Video

SPIFFE Ecosystem: MTLS and Identity with Linkerd and Teleport

Explore SPIFFE ecosystem growth, focusing on Linkerd and Teleport's implementation for workload identity verification across Kubernetes clusters and external environments.

• YouTube
• 40 minutes
• Self-Paced
• Free Video

A Needle in a Haystack: Finding Threats in Billions of Cloud Logs

Discover techniques for efficiently analyzing massive cloud audit logs to identify security threats using basic cloud tools and advanced platforms like OpenSearch and Kubernetes.

• YouTube
• 37 minutes
• Self-Paced
• Free Video

Hacking Istio: The Good, the Bad, and the Misconfigured

Explore Istio's network security tools, learn to identify and exploit vulnerabilities in misconfigurations, and understand the importance of proper security policy setup in service mesh environments.

• YouTube
• 44 minutes
• Self-Paced
• Free Video

Proactive Kubernetes Security: Anomaly Detection and Runtime Alerting in Kubernetes Workloads

Explore innovative anomaly detection for Kubernetes security using KubeCop. Learn about ApplicationProfile baselines, real-world attack scenarios, and hands-on deployment for enhanced cloud-native protection.

• YouTube
• 37 minutes
• Self-Paced
• Free Video