LinuxFoundationX: Securing Your Software Supply Chain with Sigstore
|
Gain the knowledge and skills necessary to secure the integrity of your software by leveraging the Sigstore toolkit, a free and open source project that offers automated signing and verification across release files, container images, binaries, bill of material manifests, and more.
About this course
Building and distributing software that is secure throughout its entire lifecycle can be challenging, leaving many projects unprepared to build securely by default. Attacks and vulnerabilities can emerge at any step of the chain, from writing to packaging and distributing software to end users. Sigstore is one of several innovative technologies that have emerged to improve the integrity of the software supply chain, reducing the friction developers face in implementing security within their daily work.
This course is designed with end users of Sigstore tooling in mind: software developers, DevOps engineers, security engineers, software maintainers, and related roles. To make the best of this course, you will need to be familiar with Linux terminals and using command line tools. You will also need to have intermediate knowledge of cloud computing and DevOps concepts, such as using and building containers and CI/CD systems like GitHub actions.
This course will introduce you to Cosign, Fulcio, Rekor, and the Policy Controller, the tools under the Sigstore umbrella, explaining how they support a more secure software supply chain. You will learn how to employ these tools throughout your software development, testing, and distribution processes. Additionally, those who use or implement your software will be able to verify its authenticity through tamper-resistant public logs.
Upon completing this course, you will be able to inform your organization’s security strategy and build software more securely by default.
At a Glance:
Institution: LinuxFoundationX
Subject: Computer Science
Level: Introductory
Prerequisites:
Familiarity with using the command line
Intermediate knowlegde of cloud computing and DevOps concepts, such as containers, CI/CD systems, GitHub actions, etc.
Familiarity with using and building container images
Language: English
Video Transcript: English
Associated skills:Security Strategies, Cloud Computing, DevOps, Packaging And Labeling, Automation, Supply Chain, Manifests, Innovation, Command-Line Interface, Open Source Technology, Tooling, Bill Of Materials, Linux, Github, Vulnerability, Software Development
User Reviews
Be the first to review “LinuxFoundationX: Securing Your Software Supply Chain with Sigstore”
Related Products
AWS: Hands-on with AWS: Software Development Practices
Being and excelling as a software engineer means knowing and following software development practices. Working efficiently with teammates through continous integration and continuous delivery will help shorten the time it takes to get applications in the hands of your customers.
HarvardX: Data Science: R Basics
Build a foundation in R and learn how to wrangle, analyze, and visualize data.
IBM: Back-end Application Development with Node.js and Express
In a recent Stack Overflow survey, Node.js was used by about 50% of the developers who answered the survey, making it the most used server-side technology. Express ranked as the fourth most popular web technology overall, making it the most popular server-side web framework.
LinuxFoundationX: GitHub Supply Chain Security Using GitGat
GitHub is one of the most popular SCM (source control management) systems in the world and is used by millions of open source developers. Take the first steps in securing your GitHub repositories with GitGat
How Git Works
This course is for developers and system administrators who want to really understand Git. Whether you just started using Git, or you've been using it every day for months - this course will give you the knowledge you need to become a Git master.
AnahuacX: DevOps: Foundations and tools
Learn essential Linux & Unix to efficiently manage applications from the command line. Meet the basics of source code management with Git and Github. Also, go over the pillars of DevOps like Continuous Integration/Continuous Deployment, the paradigm shift in systems management with Infrastructure as Code and the creation of containers to assure the CI/CD pipeline.
There are no reviews yet.