Skip to content

DEV Community

Supply Chain Security Series' Articles

Back to kt's Series

Cover image for Supply Chain Security: A Deep Dive into SBOM and Code Signing

kt

Jan 11

Supply Chain Security: A Deep Dive into SBOM and Code Signing

#security #sbom #kubernetes #devops

11 min read

Cover image for Sigstore Deep Dive: Unmasking the Magic Behind Keyless Verification

kt

Apr 22

Sigstore Deep Dive: Unmasking the Magic Behind Keyless Verification

#security #sigstore #kubernetes #devops

18 min read

Cover image for SLSA Deep Dive: Securing the Supply Chain Using Verifiable Levels

kt

Apr 26

SLSA Deep Dive: Securing the Supply Chain Using Verifiable Levels

#security #supplychain #slsa #openssf

12 min read

Cover image for Why Did Docker Abandon TUF?: A Turbulent History of Container Signing

kt

Apr 28

Why Did Docker Abandon TUF?: A Turbulent History of Container Signing

#security #docker #supplychain #sigstore

10 min read

Cover image for SLSA Provenance Hands-on: Generate with GitHub Actions, Verify with slsa-verifier

kt

Apr 29

SLSA Provenance Hands-on: Generate with GitHub Actions, Verify with slsa-verifier

#security #supplychain #slsa #sigstore

11 min read

Cover image for Hacking GitHub: From Tag Rewrites to Dangling Commits, Where the Git Protocol Trusts You Without Checking

kt

Apr 30

Hacking GitHub: From Tag Rewrites to Dangling Commits, Where the Git Protocol Trusts You Without Checking

#security #github #git #supplychain

19 min read