SUPPLY CHAIN SECURITY: Securing Integrity of Software Supply Chains

đź“… Date: Tuesday, March 8th, 2021
đź“Ť Time: 10 am PST to 11:30 am PST (1:00 – 2:30 pm EST)

Securing a software supply chain is a complex task. There are many moving parts, external dependencies, difficulties to ensure all holes are plugged tight and sometimes it seems that the least goes on and on forever. Fortunately, there are a lot of benefits just by taking the first steps in the secure supply chain road.
In this talk, Carlos and Adolfo will go through some of the basic technologies and tools that will help you start securing your pipelines. Through quick dives and examples, they will show how to sign images and publish the records to the sigstore transparency log, how to generate an SBOM (Software Bill of Materials) and how to generate provenance attestations to track the origins of software components.
The talk will feature demos of each technology in addition to a larger project binding them all together.

Speakers:
🔶 Adolfo GarcĂ­a Veytia, Staff Software Engineer at Chainguard, Inc

Adolfo GarcĂ­a Veytia (puerco) is a software engineer with Chainguard, Inc, where he works helping open-source projects achieve better levels of security in their release processes. He is a Technical Lead with Kubernetes SIG Release, recently acting as Branch Manager for the 1.21 and 1.22 releases. He actively works on the Release Engineering team, specializing in software improvements that drive the automation behind the Kubernetes release process. Adolfo is passionate about writing software with friends, helping new contributors, and amplifying the Latinx presence in the Cloud Native community.

🔶 Carlos Tadeu Panato JĂşnior , Engineering Manager at Mattermost
Carlos is an Engineer Manager with experience leveraging agile, DevOps, Test Automation, and CI/CD to manage large-scale distributed platforms both on-prem and in the public cloud. He’s also a Continuous Delivery Foundation Community Ambassador.

🔹 Host: Chakradhar Rao J , Chief Technology Officer at Zelar
Chakri is a Software/Solutions Architect who also codes. Specializing in containers, kubernetes , openshift and nodejs. He’s also an Ambassador @ Cloud Native Computing Foundation
https://cncf.io/about/ambassadors

Event Details:

ZOOM WEBINAR LINK:

https://www.meetup.com/cloudnativescale/

Date & Time:

Tuesday, March 8, 2022, 11:30 PM to Wednesday, March 9, 2022, 1:00 AM IST