Cosign Courses and Certifications

SLSA with Cosign and Kyverno - Securing Software Delivery in Cloud Native Environments

Explore SLSA, Cosign, and Kyverno for enhancing software delivery security in cloud-native environments. Learn practical techniques to safeguard your development pipeline.

• YouTube
• 1 hour
• On-Demand
• Free Video

Modernizing Image Security in CI/CD with Cosign and OPA

Explore Cosign for image signing and OPA for policy enforcement in CI/CD pipelines. Learn implementation strategies and see a hands-on demo for securing Kubernetes deployments.

• YouTube
• 48 minutes
• On-Demand
• Free Video

DevSecCon

Secure Kubernetes Manifests with Cosign and Kyverno

Explore open-source tools Cosign and Kyverno to secure container images and Kubernetes manifests. Learn implementation strategies for production clusters and essential use cases.

• YouTube
• 20 minutes
• On-Demand
• Free Video

OpenSSF

From Cosign to an Ecosystem - The Evolution of Sigstore

Explore the evolution of Sigstore's software security ecosystem, from its core components to advanced integrations for package managers, CI workflows, and policy enforcement tools.

• YouTube
• 29 minutes
• On-Demand
• Free Video

Securing Your Software Supply Chain with Sigstore

Enhance software supply chain security with Sigstore tools. Learn to sign, verify, and secure artifacts using Cosign, Fulcio, Rekor, and Policy Controller for tamper-resistant, verifiable software distribution.

• edX
• 7 weeks, 1-2 hours a week
• On-Demand
• Free Online Course (Audit)

Securing Kubernetes Manifests with Sigstore Cosign - Options and Best Practices

Explore options for verifying Kubernetes manifests with Sigstore Cosign. Learn about integrating security solutions, GitOps tools, and policy engines to enforce security policies and prevent unwanted changes in your cluster.

• YouTube
• 23 minutes
• On-Demand
• Free Video

Rawkode Academy

Hands-on Introduction to Sigstore - Securing the Software Supply Chain

Comprehensive introduction to sigstore, covering container image signing, keyless mode, transparency logs, and image policy enforcement with Kyverno for enhanced software supply chain security.

• YouTube
• 1 hour 8 minutes
• On-Demand
• Free Video

Attesting Practically: Exploring the Glue Behind Secure Runtime Environments

Explore practical applications of attestations in software supply chain security, focusing on Cosign, in-toto, and VEX to create secure, auditable runtime environments and effectively manage security threats.

• YouTube
• 40 minutes
• On-Demand
• Free Video

Software Supply Chain Integrity with Sigstore

Learn about Sigstore, a tool for securing software supply chains, with demos on Cosign for signing and verifying artifacts, and insights on its practical applications.

• YouTube
• 23 minutes
• On-Demand
• Free Video

Growing the Chain: Trusting Build Provenance from Userspace

Explore techniques for establishing trust in CI/CD workflows, focusing on artifact signing, provenance generation, and building a chain of trust using open-source technologies like Sigstore and OIDC.

• YouTube
• 33 minutes
• On-Demand
• Free Video

Making Sense of Security Supply Chain - An Overview for Beginners

Explore supply chain security fundamentals, tools like Fulcio, Rekor, and cosign, and their integration in this beginner-friendly overview of the rapidly evolving landscape.

• YouTube
• 24 minutes
• On-Demand
• Free Video

Harbor - Enterprise Cloud Native Artifact Registry

Explore advanced features of Harbor, an open-source registry for cloud-native artifacts. Learn about image signatures, cloud management, unified Helm and container handling, and high-availability deployments.

• YouTube
• 36 minutes
• On-Demand
• Free Video

Platform Driven Compliance with Sigstore at Autodesk

Explore Autodesk's innovative approach to software supply chain security using Sigstore, enhancing trust and compliance for hybrid desktop and cloud solutions across diverse deployment environments.

• YouTube
• 20 minutes
• On-Demand
• Free Video

Securing Kubernetes Manifests with Sigstore and Kyverno

Learn to secure Kubernetes resources using Sigstore for signing YAML definitions and Kyverno for verification during admission controls, with real-world use cases for tamper-prevention and approval workflows.

• YouTube
• 22 minutes
• On-Demand
• Free Video

Trust in Honk, Tie Up Your YAML - A Kpack Experience for Container Image Building

Explore kpack for building container images on Kubernetes, leveraging Cloud Native Buildpacks and enhancing supply chain security through declarative resources and automated processes.

• YouTube
• 29 minutes
• On-Demand
• Free Video