CNCF [Cloud Native Computing Foundation] Courses

Container Factory for Aerospace and Defense Enterprises

Aerospace software teams are building a container factory to automate compliance evidence and shift cybersecurity authorization toward active defense.

• YouTube
• 29 minutes
• Self-Paced
• Free Video

Spicing up Container Image Security with SLSA and GUAC

Learn to trace container images to their source through SLSA provenance and inspect their supply chains with GUAC before deployment.

• YouTube
• 36 minutes
• Self-Paced
• Free Video

Sharing Security Secrets: How to Encourage Security Advocates

Learn how to build a company-wide security culture by educating non-security teams, recruiting advocates, and adapting security review methods.

• YouTube
• 31 minutes
• Self-Paced
• Free Video

Learning from Supply Chain Failures and Best Practices in Other Industries

Physical-world supply chain practices and failures offer lessons for securing software supply chain pipelines.

• YouTube
• 30 minutes
• Self-Paced
• Free Video

12 Essential Requirements for Policy Enforcement and Governance with OSCAL

A live demonstration breaks down 12 policy-as-code requirements for enforcing and tracing security controls across multi-cluster, multi-cloud Kubernetes environments.

• YouTube
• 43 minutes
• Self-Paced
• Free Video

Verifying Software Signatures with TUF and Sigstore

Learn why a software signature alone doesn’t guarantee security, and how to verify that signed software came from the right people.

• YouTube
• 36 minutes
• Self-Paced
• Free Video

Leveraging SBOMs to Automate Packaging, Transfer, and Reporting of Dependencies Between Secure Environments

Shows how CycloneDX SBOMs can package, validate, and transfer software dependencies into disconnected secure environments.

• YouTube
• 26 minutes
• Self-Paced
• Free Video

Security Threat Modeling Live from Scratch Session

Create a threat model for a CNCF project in a hands-on exercise using a lightweight model.

• YouTube
• 42 minutes
• Self-Paced
• Free Video

CNI or Service Mesh? Comparing Security Policies Across Cloud Native Networking Solutions

Compares how CNI and service mesh projects enforce network policies, including recent changes and trade-offs in their implementations.

• YouTube
• 33 minutes
• Self-Paced
• Free Video

Security++ - Hide Your Secrets via Distributed Hardware Security Module

Distributed HSMs place cryptographic operations near services, balancing key protection with performance across cloud, on-premises, and edge deployments.

• YouTube
• 27 minutes
• Self-Paced
• Free Video

Taming Attestation for Cloud Native Edge Security with Parsec

Parsec offers a portable way to attest hardware-backed device identity across cloud-native platforms, including secure channel bootstrap with enhanced TLS handshakes.

• YouTube
• 30 minutes
• Self-Paced
• Free Video

Mapping Motives: Analysis of 2,000 Enterprise Cloud Detections - Strengthening Multi-Cloud SOC

An analysis of 2,000 cloud detections maps attacker motives into practical control stories and exposes gaps in enterprise defenses.

• YouTube
• 41 minutes
• Self-Paced
• Free Video

Securing the Superpowers: Who Loaded That eBPF Program?

Explores how to identify who loaded eBPF programs, restrict what can run, and preserve an audit trail for later investigation.

• YouTube
• 36 minutes
• Self-Paced
• Free Video

Lessons from 7 Headline-Grabbing Cloud Security Breaches

Seven real cloud breaches reveal recurring attack patterns and concrete defensive steps for avoiding the same security failures.

• YouTube
• 32 minutes
• Self-Paced
• Free Video

Good Fences Make Good Neighbors - Making Cross-Namespace References More Secure with ReferenceGrant

Learn how ReferenceGrant lets both sides explicitly agree before a Kubernetes resource can reference resources across namespace boundaries.

• YouTube
• 38 minutes
• Self-Paced
• Free Video