FRSCA: Tekton
In this final installment of the series we deploy Tekton and integrate it with SPIRE and Vault to generate container images with signed provenance.
FRSCA: Vault
Discover the benefits of using Vault in a FRSCA cluster. Learn how to install Vault and integrate it with SPIRE for enhanced data security.
FRSCA: SPIFFE / SPIRE
Overview In our blog series about FRSCA we’ve already learned what SLSA is and how the FRSCA reference implementation of the Secure Software Factory (SSF) architecture can help us potentially achieve SLSA Build Level 3. Previously we deployed a hardened Kubernetes...
FRSCA: Kubernetes Hardening
In a previous blog, we illustrated how easy it is to use kOps to provision Kubernetes clusters on cloud infrastructure. In this blog, we will use what we learned about kOps to deploy a hardened Kubernetes cluster in AWS using: Private topology – the API Server...
SLSA Explained: An Interview with Randy Abernethy
RX-M Managing Partner Randy Abernethy joins Ebenezer Don, the Founder of NewDev.io, on the Codegiant YouTube channel to discuss the importance of software supply chain security. Their conversation includes the need for secure artifact creation in software supply...