RESCHEDULED TO 15TH FEBRUARY, 2024 Have you heard of Software Supply Chain Security tools? Are you confused by how many acronyms, concepts, frameworks, and tools exist in the open space? Join us online from 3pm (CET) for this exciting meetup and enrich your knowledge about software supply chain security! Streaming link: https://dtag.webex.com/dtag-en/j.php?MTID=mdf629138e4357eb1155eed275b9c7616 Abstract Security should be approached in a multilayer way. There is no such thing as 100% secure, but with defense in depth, you can get to a place where your Supply Chain is fortified. This session aims to give you the tools and guidance you need across the entire software lifecycle, from building and packaging your apps to dependencies management and code scanning. We will also look into guidance for establishing trust across the entire software delivery process and ensuring only the things you need to deploy to production get deployed. This session will cover tools like cosign and some other sigstore components, gitsign, kyverno, and policy controllers for Kubernetes. Level: for beginners Agenda 15:00 Welcome speech & partner introduction 15:05 Practical Guides for Enhancing Your Software Supply Chain Security 15:50 Q&A About the Speaker Abdel Sghiouar is a senior Cloud Developer Advocate @Google Cloud. A co-host of the Kubernetes Podcast by Google and a CNCF Ambassador. His focused areas are GKE/Kubernetes, Service Mesh, and Serverless. Abdel started his career in data centers and infrastructure in Morocco, where he is originally from, before moving to Google's largest EU data center in Belgium. Then in Sweden, he joined Google Cloud Professional Services and spent five years working with Google Cloud customers on architecting and designing large-scale distributed systems before turning to advocacy and community work. Twitter: https://twitter.com/boredabdel Language: English Attendance is free of charge Data privacy information: Please note that the event will be recorded by DT-ITS and the recording may include the audience's activity during the Q&A sessions as well. The recording will be published on DT-ITS’s YouTube channel and on DTAG internal communication platforms to help professional development, share information and knowledge. By actively taking part in the Q&A session we assume that you consent to the recording of your voice during the event. For any request regarding the described data processing please contact us on this email: HU_DT_TSI_CS_BO@t-systems.com
