Protect your Kubernetes Clusters with Ratify and Attestations

on YouTube ↗06m

" summary

Ratify is a CNCF sandbox verification engine that verifies signatures, SBOMs and vulnerability reports and enforces policy via Rego; demo shows it validating signed SBOM (SPDX) and signed vulnerability JSON for an OCI image and blocking images with same-day critical CVEs. It plugs into Gatekeeper as an external data provider for admission control, integrates with containerd at runtime for node-level enforcement, and is already adopted by major cloud vendors.

AI-written summary · about

" related talks

• 20mTrust but VerifyOlivier Vernin · cdCon 2022
• 15mEnforcing a Secure Supply Chain on KubernetesRaul Cabello, Martin Víctor Cuadrado Juan · OpenInfra Summit Berlin 2022
• 36mEnforcing a Secure Supply Chain on KubernetesVíctor Cuadrado Juan, Raúl Cabello Martín · OpenInfra Summit Berlin 2022
• 40mEnforcing a Secure Supply Chain on KubernetesVíctor Cuadrado Juan, Raúl Cabello Martín · ContainerCon @ Open Source Summit Europe 2022
• 27mNever Break the Chain: Securing the Container Supply Chain with Notary, TUF, and GatekeeperKatie Novotny, Diego Casati · SupplyChainSecurityCon @ OSS NA 2023
• 43mSecuring container deployments on Azure Kubernetes Service with open-source toolsToddy Mladenov, Nannette Sperling, Joshua Duffney, Aaron Wislang · Microsoft Build 2023
• 35mEnforcing a Secure Supply Chain on KubernetesVíctor Cuadrado Juan, Raúl Cabello Martín · ContainerDays 2022
• 31mSign, Attest, and Verify! A Practical Guide for Software Supply...Vishal Choudhary, Anushka Mittal · KubeDay India 2023