#1676658: Webinar - State of the union: Modern security approaches for the Software Supply Chain
| BRI comment: | Software supply chain security is critical, yet artifact management often goes overlooked. Join Docker and Cloudsmith in this live webinar to explore how teams are securing the artifact lifecycle and staying ahead of evolving threats. |
|---|---|
| Description: |
Things you’ll learn How attackers are targeting the software supply chain — and where your blind spots are; from tampered images to compromised CI/CD workflows, we’ll unpack real-world examples of how artifacts are being exploited — and why containers, public registries, and unsigned packages are common weak points. What the 2025 U.S. Executive Order means for your artifact strategy - understand how new compliance requirements like SBOMs and provenance attestations are reshaping how software is stored, signed, and distributed — and what steps to take now. What a secure artifact lifecycle looks like in practice; learn the technical building blocks of a secure pipeline: signing with Cosign, provenance via SLSA, tamper-proof storage, and enforcing policies without adding friction to dev workflows. How SBOMs and attestations create real visibility and trust. We’ll show how to integrate SBOMs and signed metadata into your pipeline for traceability — without slowing teams down. How to move toward zero-trust for artifacts - explore how forward-thinking teams are adopting cryptographic verification, trusted sources, and immutable audit logs to lock down the full software delivery process. |
| More info: | https://cloudsmith.com/webinars/state-of-the-union-modern-security-approaches-for-the-software-supply-chain |
| Date added | April 15, 2025, 10:33 p.m. |
|---|---|
| Source | cloud smith |
| Subjects | |
| Venue | May 6, 2025, midnight - May 6, 2025, midnight |