npm and Sigstore: Provenance Comes to the World's Largest OSS Ecosystem
Industry experts analyze emerging threats surrounding npm and Sigstore: Provenance Comes to the World's Largest OSS Ecosystem.
Summary
Black Hat session on npm and Sigstore: Provenance Comes to the World's Largest OSS Ecosystem.
Related talks
The Linux Foundation·33 min
Shubham Bhardwaj · Divyanshu Agrawal
Investigates from Pipelines To Provenance: Reproducible Builds With Tekton and evaluates key implications for security practitioners.
The Linux Foundation·22 min
Brett Smith
Explores event Provenance Registry: Continuous Delivery Events for the Electric Sheep and evaluates key implications for security practitioners.
The Linux Foundation·46 min
Fredrik Skogman · Radoslav Dimitrov
Outlines enhancing Artifact Security with GitHubs Build Provenance and evaluates key implications for security practitioners.