Cosign Courses and Certifications

SLSA with Cosign and Kyverno - Securing Software Delivery in Cloud Native Environments

Explore SLSA, Cosign, and Kyverno for enhancing software delivery security in cloud-native environments. Learn practical techniques to safeguard your development pipeline.

• YouTube
• 1 hour
• Self-Paced
• Free Video

DevSecCon

Secure Kubernetes Manifests with Cosign and Kyverno

Explore open-source tools Cosign and Kyverno to secure container images and Kubernetes manifests. Learn implementation strategies for production clusters and essential use cases.

• YouTube
• 20 minutes
• Self-Paced
• Free Video

Modernizing Image Security in CI/CD with Cosign and OPA

Explore Cosign for image signing and OPA for policy enforcement in CI/CD pipelines. Learn implementation strategies and see a hands-on demo for securing Kubernetes deployments.

• YouTube
• 48 minutes
• Self-Paced
• Free Video

OpenSSF

From Cosign to an Ecosystem - The Evolution of Sigstore

Explore the evolution of Sigstore's software security ecosystem, from its core components to advanced integrations for package managers, CI workflows, and policy enforcement tools.

• YouTube
• 29 minutes
• Self-Paced
• Free Video

Securing Kubernetes Manifests with Sigstore Cosign - Options and Best Practices

Explore options for verifying Kubernetes manifests with Sigstore Cosign. Learn about integrating security solutions, GitOps tools, and policy engines to enforce security policies and prevent unwanted changes in your cluster.

• YouTube
• 23 minutes
• Self-Paced
• Free Video

Rawkode Academy

Hands-on Introduction to Sigstore - Securing the Software Supply Chain

Comprehensive introduction to sigstore, covering container image signing, keyless mode, transparency logs, and image policy enforcement with Kyverno for enhanced software supply chain security.

• YouTube
• 1 hour 8 minutes
• Self-Paced
• Free Video

OpenSSF

Exploring Essential Security Checks for Open Source Go Projects

Discover essential security tools for Go projects: gosec, govulncheck, and sigstore/cosign. Learn to enhance code security, scan vulnerabilities, and secure the supply chain.

• YouTube
• 25 minutes
• Self-Paced
• Free Video

DevSecCon

Power of AI: DevSecOps and Cloud Artifact Signing Explored - Sessions 1 and 2

Explore AI's impact on DevSecOps and cloud artifact signing. Learn how AI enhances security automation, vulnerability scanning, and threat detection. Discover tools for ensuring trust and integrity in cloud environments.

• YouTube
• 1 hour 21 minutes
• Self-Paced
• Free Video

Securing the Supply Chain: A Practical Guide to SLSA Compliance from Build to Runtime

Practical guide to securing software supply chain using CNCF tools. Covers SLSA compliance, GitHub Actions, Cosign, Kyverno, in-toto, and Kubescape for build-to-runtime security in Kubernetes ecosystems.

• YouTube
• 34 minutes
• Self-Paced
• Free Video

GoLab conference

Essential Security Checks for Your Go Project

Implement essential security checks in Go projects using open-source tools like gosec, govulncheck, and sigstore/cosign. Learn to integrate code analysis, vulnerability scanning, and supply chain security.

• YouTube
• 45 minutes
• Self-Paced
• Free Video

Growing the Chain: Trusting Build Provenance from Userspace

Explore techniques for establishing trust in CI/CD workflows, focusing on artifact signing, provenance generation, and building a chain of trust using open-source technologies like Sigstore and OIDC.

• YouTube
• 33 minutes
• Self-Paced
• Free Video

Making Sense of Security Supply Chain - An Overview for Beginners

Explore supply chain security fundamentals, tools like Fulcio, Rekor, and cosign, and their integration in this beginner-friendly overview of the rapidly evolving landscape.

• YouTube
• 24 minutes
• Self-Paced
• Free Video

Platform Driven Compliance with Sigstore at Autodesk

Explore Autodesk's innovative approach to software supply chain security using Sigstore, enhancing trust and compliance for hybrid desktop and cloud solutions across diverse deployment environments.

• YouTube
• 20 minutes
• Self-Paced
• Free Video

Securing Kubernetes Manifests with Sigstore and Kyverno

Learn to secure Kubernetes resources using Sigstore for signing YAML definitions and Kyverno for verification during admission controls, with real-world use cases for tamper-prevention and approval workflows.

• YouTube
• 22 minutes
• Self-Paced
• Free Video

Verifying and Signing EBPF Programs with Inspektor Gadget

Enhance eBPF program security with Inspektor Gadget. Learn to sign and verify OCI images using cosign, improving overall system safety by running only authenticated eBPF programs.

• YouTube
• 24 minutes
• Self-Paced
• Free Video