Running trusted payloads with Nomad and Waypoint
summary
Covers adding supply-chain protections to Waypoint build pipelines when running jobs on HashiCorp Nomad, specifically scanning incoming code, packages, and container images for vulnerabilities and signing trusted content artifacts before deployment. Focuses on integrating these steps into CI/CD workflows to guard against malicious influences both inside and outside projects.
AI-written summary · about
related talks
25mRunning Trusted Payloads With Nomad and Waypoint
30mI just want to ship my code. Waypoint, Nomad, and other things.
30mA beginner's journey: Scaling self-hosted platform infrastructure with Nomad
39mBuilding Efficient Continuous Integration Pipelines with Nomad, Vault and Jenkins
36mHow Nomad can shoot you in the foot, and what to do to dodge it
33mAbstracting Nomad: Patterns for Deploying to Nomad at Scale
27mSimple Deployment Pipelines with HashiCorp Waypoint
37mUntrusted Execution: Attacking the Cloud Native Supply Chain