Kicking Security Chain Attacks to the Curb with Kyverno and Notary...

on YouTube ↗39m

" summary

Shows how to use CNCF projects Notary, Kyverno and ORAS together to add detached signatures and signed SBOMs to OCI registries via the OCI referrers API (v1.1) and then have Kyverno consume those referrer artifacts for pre-deployment security checks. Demonstrates a GitOps workflow for large-scale Kubernetes deployments that verifies image integrity, security and compliance by establishing trust for container images and validating associated supply-chain artifacts.

AI-written summary · about

" related talks

• 35mEnforcing a Secure Supply Chain on KubernetesVíctor Cuadrado Juan, Raúl Cabello Martín · ContainerDays 2022
• 36mSecure Software Supply Chain for OCI Artifacts on KubernetesPaolo Mainardi, Andrea Panisson · Kubernetes Community Days Italy 2023
• 22mSecuring Kubernetes Manifests with Sigstore and KyvernoYuji Watanabe, Jim Bugwadia · SigstoreCon North America 2022
• 31mSign, Attest, and Verify! A Practical Guide for Software Supply...Vishal Choudhary, Anushka Mittal · KubeDay India 2023
• 40mNotary v2: Deep Dive and Open IssuesJustin Cormack, Steve Lasker · KubeCon + CloudNativeCon Europe 2022
• 15mEnforcing a Secure Supply Chain on KubernetesRaul Cabello, Martin Víctor Cuadrado Juan · OpenInfra Summit Berlin 2022
• 30mNotary v2: Supply Chain Security for ContainersJustin Cormack, Steve Lasker · KubeCon + CloudNativeCon Europe 2021
• 37mNotary: State Of DevelopmentJustin Cormack · KubeCon + CloudNativeCon North America 2022