in-toto Courses and Certifications

OpenSSF

Harnessing In-toto Attestations for Security and Compliance With Next-gen Policies

Explore in-toto's new policy framework for supply chain security, linking attestations in powerful ways to meet compliance requirements and real-world use cases.

• YouTube
• 19 minutes
• On-Demand
• Free Video

Attesting and Verifying Your Software Supply-Chain With In-toto

Discover how to protect your software supply chain using in-toto framework, which provides cryptographic attestation and policy enforcement capabilities for secure software development.

• YouTube
• 33 minutes
• On-Demand
• Free Video

Securing the Software Supply Chain with the In-toto and SPIRE Projects

Explore securing software supply chains using in-toto and SPIRE projects. Learn about cryptographic attestation, automated certificate issuance, and building trust in software releases.

• YouTube
• 20 minutes
• On-Demand
• Conference Talk

In-toto - Securing the Entire Software Supply Chain

Explore in-toto's protocol for verifiably defining and securing software supply chain steps, enhancing security guarantees for cloud-native and other ecosystems.

• YouTube
• 19 minutes
• On-Demand
• Conference Talk

Toto-Ally TUF: Simple Tools for a Secure Software Supply Chain

Learn to secure software supply chains using in-toto and TUF frameworks. Explore their integration, real-world applications, and new open-source tools for enhanced protection against cyber threats.

• YouTube
• 35 minutes
• On-Demand
• Free Video

In-Toto: Attestations and Software Supply Chain Security

Explore in-toto framework's advancements in software supply chain security, including attestation verification, type mapping, and integrations with CNCF projects and industry tools.

• YouTube
• 35 minutes
• On-Demand
• Free Video

State of the Art Supply Chain Security - In-toto, TUF, and SigStore

Explore cutting-edge supply chain security with in-toto, TUF, and SigStore. Learn how these tools create a transparent, hack-proof system to protect software from developer to end-user.

• YouTube
• 32 minutes
• On-Demand
• Conference Talk

Achieving End-to-End Software Supply Chain Security with in-toto

Explore in-toto's advancements in software supply chain security, including artifact tracking, attestation types, and integrations with CNCF projects for cloud-native identity protection.

• YouTube
• 35 minutes
• On-Demand
• Free Video

A Step Closer to Secure Development: Using in-Toto and OPA Gatekeeper to Verify Artifact Integrity

Explore securing software supply chains using in-toto, Witness, Archivista, and OPA Gatekeeper. Learn to verify artifact integrity from development to Kubernetes deployment.

• YouTube
• 45 minutes
• On-Demand
• Free Video

Secure Release Processes with in-Toto Policy Verification

Discover how to enforce secure software release processes using in-toto's policy verification system, covering attestations, SDLC compliance, and build provenance for enhanced security measures.

• YouTube
• 33 minutes
• On-Demand
• Free Video

Enforceable Software Supply Chain Policies and Attestations Using in-Toto

Explore software supply chain security using in-toto, focusing on policies and attestations to defend against attacks like SUNBURST. Learn to implement SLSA specifications and comply with regulations.

• YouTube
• 35 minutes
• On-Demand
• Free Video

CAE in Cybersecurity Community

Securing Software Supply Chains with In-Toto

Explore in-toto, a framework for securing software supply chains, and learn its implementation strategies for enhancing cybersecurity in software development processes.

• YouTube
• 33 minutes
• On-Demand
• Free Video

USENIX

In-toto - Providing Farm-to-Table Guarantees for Bits and Bytes

Explore in-toto, a framework ensuring software supply chain integrity from inception to deployment, addressing vulnerabilities and protecting millions of users across various cloud environments.

• YouTube
• 21 minutes
• On-Demand
• Conference Talk

Anyscale

How Datadog is Transforming Time Series Forecasting with Toto

Discover how Toto, a Time Series-Optimized Transformer, revolutionizes forecasting through advanced architecture and trillion-point training data, enabling precise zero-shot predictions for observability metrics.

• YouTube
• 13 minutes
• On-Demand
• Free Video

Archivista: Using TUF to Store Policy and Verify In-toto Attestations - Demo

Demonstration of Archivista using TUF for policy storage and verifying in-toto attestations, showcasing software production verification and tool usage tracking.

• YouTube
• 26 minutes
• On-Demand
• Free Video