Securing Your Software Supply Chain with Sigstore (LFS182) Course Overview

Target Audience for Securing Your Software Supply Chain with Sigstore (LFS182)

Securing Your Software Supply Chain with Sigstore (LFS182) equips IT professionals with the tools necessary for securing software throughout its lifecycle, tailored for those familiar with Linux, cloud computing, and DevOps.

• DevOps Engineers
• Cloud Engineers
• Site Reliability Engineers (SREs)
• Software Developers
• System Administrators
• Security Engineers
• IT Managers
• Software Architects
• Cybersecurity Professionals
• QA Engineers

Learning Objectives - What you will Learn in this Securing Your Software Supply Chain with Sigstore (LFS182)?

Introduction: The "Securing Your Software Supply Chain with Sigstore (LFS182)" course empowers you to enhance the security of your software lifecycle using Sigstore tools. It covers key concepts and practical implementations of secure signing, transparency logs, and policy enforcement.

Learning Objectives and Outcomes:

• Understand the Basics of Sigstore:

  • Grasp the fundamental purpose and benefits of using Sigstore in your software supply chain.

• Cosign: Signing and Verifying Containers and Artifacts:

  • Learn to sign and verify container images and other artifacts to ensure their integrity and authenticity.

• Fulcio: The Trusted Digital Certificate Authority:

  • Understand how Fulcio acts as a certificate authority to provide trusted identities for signing artifacts.

• Rekor: The Immutable and Secure Transparency Log:

  • Gain insights into using Rekor for maintaining an immutable and transparent log of signed artifacts.

• Policy Controller: The Kubernetes Cluster Gatekeeper:

  • Implement Policy Controller to enforce security policies within Kubernetes clusters, ensuring only signed and verified containers are deployed.

• Practical Implementation:

  • Hands-on exercises and practical examples to apply Sigstore tools in real-world scenarios.

• Community Engagement:

  • Learn how