Building SLSA 3 Conforment Attestors for Artifacts Generated on GitHub
34 min

Building SLSA 3 Conforment Attestors for Artifacts Generated on GitHub

KubeCon + CloudNativeCon - KubeCon + CloudNativeCon Europe 2023
Ian Lewis Asra Ali
slsa supply-chain-security github-actions software-supply-chain provenance attestation container-images ci-cd open-source-security build-automation security-frameworks
Filling the Gaps in Kubernetes Flavored SLSA with Threat Modeling
34 min

Filling the Gaps in Kubernetes Flavored SLSA with Threat Modeling

KubeCon + CloudNativeCon - KubeCon + CloudNativeCon Europe 2023
Christie Wilson Priya Wadhwa
kubernetes slsa supply-chain-security threat-modeling ci-cd tekton spire sigstore container-security security-frameworks