Who Are You Building For: Pipelines Have a Purpose
summary
Red Hat builds a Tekton-based platform called Conflux that produces Tekton Chains SLSA provenance at build-level 3, signs provenance with isolated keys, and passes OCI digests between task steps so policy checks validate exact inputs and outputs. Out-of-the-box scanners and a hermetic builds with Hermetto option let repos get immediate PR checks: one runs the repo pipeline, another runs Conform policy rules, and a MMaker (Renovate) sidecar auto-updates deps. Teams can customize pipelines but cannot release artifacts to protected namespaces until policies pass.
AI-written summary · about
chapters (10)
- 0:00Introduction
- 0:43Pipelines need purpose
- 2:53Secure pipelines by default
- 5:01Trust model and architecture
- 8:50Developer experience with Conflux
- 12:01Automated security and compliance
- 13:50Release process and policies
- 14:56Key takeaways
- 15:57Future talks and resources
- 17:46Q&A
related talks
18mLet Devs Be Devs Without Sacrificing Security
41mBeyond Guidelines - Designing & Implementing Robust Build Pipelines
26mProtect the Pipe! A Policy-based Approach for Securing CI/CD Pipe...
33mFrom Pipelines To Provenance: Reproducible Builds With Tekton
10mIt's Time We Start Securing Our CICD Pipelines
34mFrom Code to Deployment: A Deep Dive into Pipelines as Code
47mTekton, a new approach to pipelines
29mCloud Native CD Pipelines with Tekton