Переходьте в офлайн за допомогою програми Player FM !
Container supply chain: come mettere in sicurezza tutti gli step (ospite: Simone Salsi)
Manage episode 401771363 series 2677140
Cosa si intende per Container Supply Chain? E cosa può andare storto se la catena non viene gestita nel modo corretto? Quali framework e strumenti sono a disposizione? In questo episodio ospito Simone Salsi, Solutions Architect di AWS Italia, per parlare di come creare pipeline di sviluppo e messa in produzione in grado di mitigare i rischi e massimizzare la sicurezza dei container.
Link utili:
- SLSA: https://slsa.dev
- Software Bill of Materials (SBoM): https://docs.aws.amazon.com/whitepapers/latest/practicing-continuous-integration-continuous-delivery/software-bill-of-materials-sbom.html
- CNCF whitepaper: https://github.com/cncf/tag-security/blob/main/supply-chain-security/supply-chain-security-paper/CNCF_SSCP_v1.pdf
- [blog] Shift left to secure your container supply chain: https://aws.amazon.com/blogs/containers/shift-left-to-secure-your-container-supply-chain/
- DevSecOps workshop: https://container-devsecops.awssecworkshops.com
134 епізодів
Manage episode 401771363 series 2677140
Cosa si intende per Container Supply Chain? E cosa può andare storto se la catena non viene gestita nel modo corretto? Quali framework e strumenti sono a disposizione? In questo episodio ospito Simone Salsi, Solutions Architect di AWS Italia, per parlare di come creare pipeline di sviluppo e messa in produzione in grado di mitigare i rischi e massimizzare la sicurezza dei container.
Link utili:
- SLSA: https://slsa.dev
- Software Bill of Materials (SBoM): https://docs.aws.amazon.com/whitepapers/latest/practicing-continuous-integration-continuous-delivery/software-bill-of-materials-sbom.html
- CNCF whitepaper: https://github.com/cncf/tag-security/blob/main/supply-chain-security/supply-chain-security-paper/CNCF_SSCP_v1.pdf
- [blog] Shift left to secure your container supply chain: https://aws.amazon.com/blogs/containers/shift-left-to-secure-your-container-supply-chain/
- DevSecOps workshop: https://container-devsecops.awssecworkshops.com
134 епізодів
Усі епізоди
×Ласкаво просимо до Player FM!
Player FM сканує Інтернет для отримання високоякісних подкастів, щоб ви могли насолоджуватися ними зараз. Це найкращий додаток для подкастів, який працює на Android, iPhone і веб-сторінці. Реєстрація для синхронізації підписок між пристроями.