supply chain security
How Container Image Signing Works From Build to Kubernetes Deployment
Container image signing helps DevOps teams verify artifact identity and integrity before deployment, strengthening software supply chain security with signatures, provenance and Kubernetes admission controls ...
Michael Carter | | Artifact Integrity, attestations, CI/CD security, container image signing, container registry, container security, cryptographic signing, deployment policy, DevSecOps, ephemeral runners, image digest, image provenance, keyless signing, Kubernetes admission, Kubernetes security, SBOM, software provenance, software supply chain, supply chain security, trusted delivery
Shimmy’s Early Look: Can’t-Miss Sessions at KubeCon + CloudNativeCon North America 2025
CNCF turns 10 as KubeCon + CloudNativeCon North America 2025 heads to Atlanta this November. With 300+ sessions on Kubernetes, AI, platform engineering, security, and observability, the event showcases the next decade ...
Alan Shimel | | AI workloads on Kubernetes, cloud native AI, cloud native events, CloudNativeCon 2025, CNCF community, DevOps conferences 2025, KubeCon 2025, KubeCon keynotes, Kubernetes conference Atlanta, Kubernetes security, multi-cluster orchestration, observability Kubernetes, platform engineering, supply chain security
GitLab Security and Governance Solution Helps Secure Organizations’ End-to-End Software Supply Chains
The One DevOps Platform enables organizations to stay ahead of threat vectors, maintain compliance posture and deliver secure software faster Detroit, MI, October 25, 2022—Today at KubeCon + CloudNativeCon North America, GitLab ...
The State of K8s Software Supply Chain Attacks
Securing the software supply chain is in the zeitgeist, and for a good reason. Software supply chain attacks grew by more than 300% from 2020 to 2021. Supply chain attacks continue to ...
CNCF: Rise in Emerging Open Source Tech on K8s
A new report from the Cloud Native Computing Foundation (CNCF) in collaboration with Datadog, New Relic and Slashdata finds a wider range of emerging open source technologies are being deployed on top ...

