CKS Self-Study Module 5: Supply Chain Security
This self-study module contains all of the topics outlined in the CNCF CKS Exam Curriculum. If you are not already familiar with the curriculum, take a moment to familiarize yourself as you will need to demonstrate knowledge of each topic in order to pass the CKS exam.
CKS Mod 5: Minimize base image footprint
This lesson demonstrates how to build a container image in a multi-stage build to minimize the image.
CKS Mod 5: Understand your supply chain (e.g. SBOM, CI/CD, artifact repositories)
This lesson demonstrates using the bom tool to interact with SBOMs.
CKS Mod 5: Secure your supply chain (permitted registries, sign and validate artifacts, etc.)
This lesson discusses creating accept lists of permitted registries and demonstrates validating artifacts using gpg.
CKS Mod 5: Perform static analysis of user workloads and container images (e.g. Kubesec, KubeLinter)
This lesson demonstrates using kube-score to lint a pod spec.
CKS Mod 5: Practice Drill(s)
This practice drill asks you to create a pod that adheres to a specified pod security standard.