Securing Container Supply Chain in CI/CD with Notary Project, ORAS and Harbor

on YouTube ↗55m

" summary

Shows how to integrate Harbor, the Notary Project, and ORAS into CI/CD pipelines to ensure container image and OCI artifact integrity and provenance. Covers using those open-source tools to verify signatures, enforce policies, and prevent tampered or non-compliant images from being deployed to production.

AI-written summary · about

" related talks

• 32mSecuring Your Container Native Supply Chain with SLSA, Github and Te...Laurent Simon, Priya Wadhwa · KubeCon + CloudNativeCon Europe 2022
• 30mNotary v2: Supply Chain Security for ContainersJustin Cormack, Steve Lasker · KubeCon + CloudNativeCon Europe 2021
• 34mIntro: HarborHenry Zhang, Jia Zou · KubeCon + CloudNativeCon China 2018
• 35mSecuring the Perimeter - CFCR/CFAR Chain of Custody With CI/CD PipelinesKeith Strini · KubeCon + CloudNativeCon China 2018
• 41mInto Safe Harbor: Introduction to Container SecurityStephan Kaps · JCON 2020
• 32mNotary v2: Redesigning the Secure Supply Chain for ContainersJustin Cormack, Steve Lasker · KubeCon + CloudNativeCon North America 2020 Virtual
• 35mNotary: State of the Container Supply ChainJustin Cormack, Steve Lasker · KubeCon + CloudNativeCon North America 2021
• 36mHarbor - Enterprise Cloud Native Artifact Regi...Yan Wang, Daojun Zhang, Chenyu Zhang, Vadim Bauer · KubeCon + CloudNativeCon Europe 2022