Trust in Honk, Tie up Your Yaml: A Kpack Experience

on YouTube ↗29m

" summary

Live demo of kpack builds OCI images on Kubernetes from a Git URL and git revision, using Cloud Native Buildpacks (Node.js/Java stacks), pushing signed images to Docker Hub and verifying them with cosign. Each build emits SBOMs for each layer and reuses cached layers to speed rebuilds when source changes; service account + secret handles registry and cosign credentials, and the demo shows successful sign, push, and verify cycles.

AI-written summary · about

" chapters (15)

1. 0:00Introduction
2. 1:04What is kpack
3. 3:58Git-based YAML automation
4. 6:07Core YAML components
5. 8:19Builders stacks stores
6. 12:56Supply chain security
7. 13:40OPSSF’s role
8. 15:24Fresca secure builds
9. 16:29Salsa levels
10. 18:17Cosign Sigstore integration
11. 19:23Demo setup
12. 21:50Live demo
13. 27:18Verifying signatures
14. 28:43Supply chain trifactor
15. 29:04Call to action Q&A