Lightning Talk: 5 Tactics To Forging a Hardened Software Chain
summary
Five concrete handoffs with actionable fixes: start at source with platform golden paths and standardized defaults to stop misconfigurations, mandate generate SBOMs at every build so every artifact has an audit trail, stop trusting mutable tags and sign image digests in the registry, enforce policy-as-code admission gates integrated into GitOps so only signed artifacts deploy, and deploy eBPF kernel monitoring that provides system‑level visibility and can block suspicious syscalls to prevent zero‑day execution.
AI-written summary · about
related talks
06mLightning Talk: DevSecOps for C++? Keep Calm and use Conan
25mYour Software Supply Chain is Only as Secure as its Weakest Link
37mUntrusted Execution: Attacking the Cloud Native Supply Chain
36mBuilding a Trusted and Resilient Software Supply Chain
24mProtecting Ourselves from CNCFgate. Software Supply Cha...
12mKeynote: DevSecOps and the Art of Not Ending Up On the Front Page
30mSecuring Open Source Supply Chains
23mMastering Secure Software Supply Chains