Aysylu Greenberg, profile picture
Uploaded byAysylu Greenberg
PDF, PPTX800 views

Software Supply Chain Observability with Grafeas and Kritis

The document discusses software supply chain observability using Grafeas and Kritis, highlighting their roles in managing code from check-in to deployment through CI/CD pipelines. It details how Kritis enforces deployment policies related to security vulnerabilities and how Grafeas serves as a centralized metadata knowledge base for build information and vulnerabilities. The presentation emphasizes the importance of policy enforcement and vulnerability scanning in the secured deployment of software applications.

Embed presentation

Download as PDF, PPTX
1 / 105
2 / 105
3 / 105
4 / 105
5 / 105
6 / 105
7 / 105
8 / 105
9 / 105
10 / 105
11 / 105
12 / 105
13 / 105
14 / 105
15 / 105
16 / 105
17 / 105
18 / 105
19 / 105
20 / 105
21 / 105
22 / 105
23 / 105
24 / 105
25 / 105
26 / 105
27 / 105
28 / 105
29 / 105
30 / 105
31 / 105
32 / 105
33 / 105
34 / 105
35 / 105
36 / 105
37 / 105
38 / 105
39 / 105
40 / 105
41 / 105
42 / 105
43 / 105
44 / 105
45 / 105
46 / 105
47 / 105
48 / 105
49 / 105
50 / 105
51 / 105
52 / 105
53 / 105
54 / 105
55 / 105
56 / 105
57 / 105
58 / 105
59 / 105
60 / 105
61 / 105
62 / 105
63 / 105
64 / 105
65 / 105
66 / 105
67 / 105
68 / 105
69 / 105
70 / 105
71 / 105
72 / 105
73 / 105
74 / 105
75 / 105
76 / 105
77 / 105
78 / 105
79 / 105
80 / 105
81 / 105
82 / 105
83 / 105
84 / 105
85 / 105
86 / 105
87 / 105
88 / 105
89 / 105
90 / 105
91 / 105
92 / 105
93 / 105
94 / 105
95 / 105
96 / 105
97 / 105
98 / 105
99 / 105
100 / 105
101 / 105
102 / 105
103 / 105
104 / 105
105 / 105
Software Supply Chain Observability with Grafeas and Kritis Aysylu Greenberg June 4 2019 Photo via https://www.goodfreephotos.com/
Aysylu Greenberg - Sr Software Engineer @Google
Aysylu Greenberg - Sr Software Engineer @Google - Eng Lead of open-source Grafeas and Kritis
Aysylu Greenberg - Sr Software Engineer @Google - Eng Lead of open-source Grafeas and Kritis - @aysylu22
In This Talk Software Supply Chain Management Kritis Grafeas Kritis & Grafeas 0.1.0 1 2 3 4
In This Talk Software Supply Chain Management Kritis Grafeas Kritis & Grafeas 0.1.0 1 2 3 4
Software Supply Chain Management Code Checkin Test & Verification Write code Build Image Deploy to Production QA
Software Supply Chain Management Code Checkin Test & Verification Write code Build Image Deploy to Production QA
Software Supply Chain Management Code Checkin Test & Verification Write code Build Image Deploy to Production QA
Software Supply Chain Management Code Checkin Test & Verification Write code Build Image Deploy to Production QA
Software Supply Chain Management Code Checkin Test & Verification Write code Build Image Deploy to Production QA CI pipelines
Software Supply Chain Management Code Checkin Test & Verification Write code Build Image Deploy to Production QA
Software Supply Chain Management Code Checkin Test & Verification Write code Build Image Deploy to Production QA CD pipelines
Software Supply Chain Management Code Checkin Test & Verification Write code Build Image Deploy to Production QA
Software Supply Chain Management what happens to code from source to deployment? Code Checkin Test & Verification Write code Build Image Deploy to Production QA
Software Supply Chain Management what happens to code from source to deployment? CI/CD pipelines, observability tools Code Checkin Test & Verification Write code Build Image Deploy to Production QA
Software Supply Chain with Grafeas & Kritis CI/CD pipelines Build & Deploy
Software Supply Chain with Grafeas & Kritis CI/CD pipelines Build & Deploy Secure build process Automated test, scan, analysis Deploy checks
Software Supply Chain with Grafeas & Kritis CI/CD pipelines Build & Deploy Secure build process Automated test, scan, analysis Deploy checks Centralized metadata knowledge base Grafeas backed storage vulnerabilities, build info, etc.
Software Supply Chain with Grafeas & Kritis CI/CD pipelines Build & Deploy Secure build process Automated test, scan, analysis Deploy checks Centralized metadata knowledge base Kritis Admission controller Grafeas backed storage vulnerabilities, build info, etc.
Software Supply Chain with Grafeas & Kritis CI/CD pipelines Build & Deploy Secure build process Automated test, scan, analysis Deploy checks Centralized metadata knowledge base Kritis Admission controller Deploy time policy chokepoint Enforce policies for severity of vulnerabilities, image location, etc. Grafeas backed storage vulnerabilities, build info, etc.
Software Supply Chain with Grafeas & Kritis CI/CD pipelines Build & Deploy Secure build process Automated test, scan, analysis Deploy checks Centralized metadata knowledge base Kritis Admission controller Deploy time policy chokepoint Enforce policies for severity of vulnerabilities, image location, etc. Production Grafeas backed storage vulnerabilities, build info, etc.
Software Supply Chain with Grafeas & Kritis CI/CD pipelines Build & Deploy Secure build process Automated test, scan, analysis Deploy checks Grafeas backed storage vulnerabilities, build info, etc. Centralized metadata knowledge base Kritis Admission controller Deploy time policy chokepoint Enforce policies for severity of vulnerabilities, image location, etc. Production
Software Supply Chain Observability CI/CD pipelines Build & Deploy Secure build process Automated test, scan, analysis Deploy checks Grafeas backed storage vulnerabilities, build info, etc. Centralized metadata knowledge base Kritis Admission controller Deploy time policy chokepoint Enforce policies for severity of vulnerabilities, image location, etc. Production
Grafeas & Kritis Binary Authorization Container Registry Vulnerability Scanning
Είναι όλα ελληνικά για μένα [It's all Greek to me]
Grafeas & Kritis JudgeScribe
In This Talk Software Supply Chain Management Kritis Grafeas Kritis & Grafeas 0.1.0 1 2 3 4
In This Talk Software Supply Chain Management Kritis Grafeas Kritis & Grafeas 0.1.0 1 2 3 4
Kritis Code Checkin Test & Verification Write code Build Image Deploy to Production QA github.com/grafeas/kritis
Kritis: Deploy-Time Policy Enforcer
Let's deploy our e-commerce website...
Kritis: Admission Flow $ kubectl apply site.yaml
Kritis: Admission Flow kubectl apply site.yaml
Kritis: Admission Flow k8s kubectl apply site.yaml
Kritis: Admission Flow k8sKritis kubectl apply site.yaml
Kritis: Admission Flow k8sKritis kubectl apply site.yaml $ helm install <path>/kritis-charts-0.1.0.tgz
Kritis: Admission Flow kubectl apply site.yaml k8s Pod spec 1. Admission Request Kritis
Kritis: Admission Flow kubectl apply site.yaml k8s WebHook Pod spec 1. Admission Request Kritis
Kritis: Admission Flow kubectl apply site.yaml k8s WebHook Pod spec 1. Admission Request Kritis
Kritis: Admission Flow kubectl apply site.yaml k8s WebHook Pod spec 1. Admission Request Kritis 2. review
Kritis: Admission Flow kubectl apply site.yaml k8s WebHook Pod spec 1. Admission Request Kritis 2. review Policies
Kritis: Admission Flow kubectl apply site.yaml k8s WebHook Pod spec 1. Admission Request Kritis 2. review Policies ns:prod Image Security Policy CRD ns:qa Image Security Policy CRD ns:prod Image Security Policy CRD
Kritis: Admission Flow kubectl apply site.yaml k8s WebHook Pod spec 1. Admission Request Kritis 2. review Policies ns:prod Image Security Policy CRD ns:qa Image Security Policy CRD ns:prod Image Security Policy CRD Image Security Validator
Kritis: Admission Flow kubectl apply site.yaml k8s WebHook Pod spec 1. Admission Request Kritis 2. review Policies ns:prod Image Security Policy CRD ns:qa Image Security Policy CRD ns:prod Image Security Policy CRD Image Security Validator 3. Fetch metadata Grafeas
Kritis: Admission Flow kubectl apply site.yaml k8s WebHook Pod spec 1. Admission Request Kritis 2. review Policies ns:prod Image Security Policy CRD ns:qa Image Security Policy CRD ns:prod Image Security Policy CRD Image Security Validator 3. Fetch metadata Grafeas
Oh no! Vulnerability scan isn't finished...
Kritis: Admission Flow kubectl apply site.yaml k8s WebHook Pod spec 1. Admission Request Kritis 2. review Policies ns:prod Image Security Policy CRD ns:qa Image Security Policy CRD ns:prod Image Security Policy CRD Image Security Validator 3. Fetch metadata Grafeas 4 a) denied 4 a) denied
Kritis: Admission Flow kubectl apply site.yaml k8s WebHook Pod spec 1. Admission Request Kritis 2. review Policies ns:prod Image Security Policy CRD ns:qa Image Security Policy CRD ns:prod Image Security Policy CRD Image Security Validator 3. Fetch metadata Grafeas 4 a) denied 4 a) denied Pod
Vulnerability scanning is finished! CVE-2019-5514 is found...
Kritis: Admission Flow kubectl apply site.yaml k8s WebHook Pod spec 1. Admission Request Kritis 2. review Policies ns:prod Image Security Policy CRD ns:qa Image Security Policy CRD ns:prod Image Security Policy CRD Image Security Validator 3. Fetch metadata Grafeas vuln
Kritis: Admission Flow kubectl apply site.yaml k8s WebHook Pod spec 1. Admission Request Kritis 2. review Policies ns:prod Image Security Policy CRD ns:qa Image Security Policy CRD ns:prod Image Security Policy CRD Image Security Validator 3. Fetch metadata Grafeas 4 a) denied Pod vuln
Whitelist CVE-2019-5514 because it doesn't affect the website...
Kritis: Admission Flow kubectl apply site.yaml k8s WebHook Pod spec 1. Admission Request Kritis 2. review Policies ns:prod Image Security Policy CRD ns:qa Image Security Policy CRD ns:prod Image Security Policy CRD Image Security Validator 3. Fetch metadata Grafeas vuln
Kritis: Admission Flow kubectl apply site.yaml k8s WebHook Pod spec 1. Admission Request Kritis 2. review Policies ns:prod Image Security Policy CRD ns:qa Image Security Policy CRD ns:prod Image Security Policy CRD Image Security Validator 3. Fetch metadata Grafeas 4 b) admitted4 b) admitted Pod vuln
It's time to scale up your site! $ kubectl scale deployments/site --replicas=4
Kritis: Admission Flow kubectl apply site.yaml k8s WebHook Pod spec 1. Admission Request Kritis 2. review Policies ns:prod Image Security Policy CRD ns:qa Image Security Policy CRD ns:prod Image Security Policy CRD Image Security Validator 3. Fetch metadata Grafeas Pod PodPod Pod vuln
A new vulnerability is found during scale up... CVE-2019-9919
vuln Kritis: Admission Flow kubectl apply site.yaml k8s WebHook Pod spec 1. Admission Request Kritis 2. review Policies ns:prod Image Security Policy CRD ns:qa Image Security Policy CRD ns:prod Image Security Policy CRD Image Security Validator 3. Fetch metadata Grafeas Pod PodPod Pod CVE-2019-9919
Kritis attestations to the rescue...
Kritis: Admission Flow kubectl apply site.yaml k8s WebHook Pod spec 1. Admission Request Kritis 2. review Policies ns:prod Image Security Policy CRD ns:qa Image Security Policy CRD ns:prod Image Security Policy CRD Image Security Validator 3. Fetch metadata Grafeas 4 b) admitted4 b) admitted Pod vuln
Kritis: Admission Flow kubectl apply site.yaml k8s WebHook Pod spec 1. Admission Request Kritis 2. review Policies ns:prod Image Security Policy CRD ns:qa Image Security Policy CRD ns:prod Image Security Policy CRD Image Security Validator 3. Fetch metadata Grafeas 4 b) admitted4 b) admitted Pod Attestor Attestation Authority CRD vuln
Kritis: Admission Flow kubectl apply site.yaml k8s WebHook Pod spec 1. Admission Request Kritis 2. review Policies ns:prod Image Security Policy CRD ns:qa Image Security Policy CRD ns:prod Image Security Policy CRD Image Security Validator 3. Fetch metadata Grafeas 4 b) admitted4 b) admitted Pod Attestor Attestation Authority CRD 5. Store attestations for admitted images vuln
Kritis: Admission Flow kubectl apply site.yaml k8s WebHook Pod spec 1. Admission Request Kritis 2. review Policies ns:prod Image Security Policy CRD ns:qa Image Security Policy CRD ns:prod Image Security Policy CRD Image Security Validator 3. Fetch metadata Grafeas vuln 4 b) admitted4 b) admitted Pod Attestor Attestation Authority CRD 5. Store attestations for admitted images attestation
Kritis: Admission Flow kubectl apply site.yaml k8s WebHook Pod spec 1. Admission Request Kritis 2. review Policies ns:prod Image Security Policy CRD ns:qa Image Security Policy CRD ns:prod Image Security Policy CRD Image Security Validator 3. Fetch metadata Grafeas vuln 4 b) admitted4 b) admitted Pod Attestor Attestation Authority CRD 5. Store attestations for admitted images attestation Pod
Kritis: Admission Flow kubectl apply site.yaml k8s WebHook Pod spec 1. Admission Request Kritis 2. review Policies ns:prod Image Security Policy CRD ns:qa Image Security Policy CRD ns:prod Image Security Policy CRD Image Security Validator 3. Fetch metadata Grafeas vuln 4 b) admitted4 b) admitted Pod Attestor Attestation Authority CRD 5. Store attestations for admitted images attestation Pod CVE-2019-9919
Kritis: Admission Flow kubectl apply site.yaml k8s WebHook Pod spec 1. Admission Request Kritis 2. review Policies ns:prod Image Security Policy CRD ns:qa Image Security Policy CRD ns:prod Image Security Policy CRD Image Security Validator 3. Fetch metadata Grafeas vuln 4 b) admitted4 b) admitted Pod Attestor Attestation Authority CRD 5. Store attestations for admitted images attestation Pod CVE-2019-9919 6. Fetch attestations for admitted image
Kritis: Admission Flow kubectl apply site.yaml k8s WebHook Pod spec 1. Admission Request Kritis 2. review Policies ns:prod Image Security Policy CRD ns:qa Image Security Policy CRD ns:prod Image Security Policy CRD Image Security Validator 3. Fetch metadata Grafeas vuln 4 b) admitted4 b) admitted Pod Attestor Attestation Authority CRD 5. Store attestations for admitted images attestation Pod CVE-2019-9919 6. Fetch attestations for admitted image Pod Pod 7. admitted
Discovering new vulnerabilities in admitted containers ...
Kritis: Background Cron kubectl apply site.yaml k8s WebHook Pod spec 1. Admission Request Kritis 2. review Policies ns:prod Image Security Policy CRD ns:qa Image Security Policy CRD ns:prod Image Security Policy CRD Image Security Validator 3. Fetch metadata Grafeas vuln 4 b) admitted4 b) admitted Pod Attestor Attestation Authority CRD 5. Store attestations for admitted images attestation Pod 6. Fetch attestations for admitted image Pod Pod 7. admitted
Kritis: Background Cron kubectl apply site.yaml k8s WebHook Pod spec 1. Admission Request Kritis 2. review Policies ns:prod Image Security Policy CRD ns:qa Image Security Policy CRD ns:prod Image Security Policy CRD Image Security Validator 3. Fetch metadata Grafeas vuln 4 b) admitted4 b) admitted Pod Attestor Attestation Authority CRD 5. Store attestations for admitted images attestation Pod 6. Fetch attestations for admitted image Pod Pod Background Cron 7. admitted
Kritis: Background Cron kubectl apply site.yaml k8s WebHook Pod spec 1. Admission Request Kritis 2. review Policies ns:prod Image Security Policy CRD ns:qa Image Security Policy CRD ns:prod Image Security Policy CRD Image Security Validator 3. Fetch metadata Grafeas vuln 4 b) admitted4 b) admitted Pod Attestor Attestation Authority CRD 5. Store attestations for admitted images attestation Pod 6. Fetch attestations for admitted image Pod Pod Background Cron 7. admitted
Kritis: Background Cron kubectl apply site.yaml k8s WebHook Pod spec 1. Admission Request Kritis 2. review Policies ns:prod Image Security Policy CRD ns:qa Image Security Policy CRD ns:prod Image Security Policy CRD Image Security Validator 3. Fetch metadata Grafeas vuln 4 b) admitted4 b) admitted Pod Attestor Attestation Authority CRD 5. Store attestations for admitted images attestation Pod 6. Fetch attestations for admitted image Pod Pod Background Cron 7. admitted
ImageSecurityPolicy CRD apiVersion: kritis.grafeas.io/v1beta1 kind: ImageSecurityPolicy metadata: name: my-isp spec: imageWhitelist: - gcr.io/kritis-int-test/nginx-digest-whitelist:latest packageVulnerabilityRequirements: maximumSeverity: MEDIUM whitelistCVEs: - providers/goog-vulnz/notes/CVE-2017-1000082 - providers/goog-vulnz/notes/CVE-2017-1000081
Observability with Kritis
Observability with Kritis When did the image deploy?
Observability with Kritis When did the image deploy? When did the image pass policy checks?
Observability with Kritis When did the image deploy? When did the image pass policy checks? When did the image stop satisfying policy?
Kritis Open source, built with the community Plugs into the k8s admission controller Attest images and verify before deployment Apply consistent deploy policy across k8s environments github.com/grafeas/kritis kritis-users@googlegroups.com
In This Talk Software Supply Chain Management Kritis Grafeas Kritis & Grafeas 0.1.0 1 2 3 4
In This Talk Software Supply Chain Management Kritis Grafeas Kritis & Grafeas 0.1.0 1 2 3 4
Grafeas Code Checkin Test & Verification Write code Build Image Deploy to Production QA github.com/grafeas/grafeas
Grafeas: Artifact Metadata API
Grafeas: Artifact Metadata API = images, binaries, packages...
Grafeas: Artifact Metadata API = build, deployment, vulnerability, ...
Grafeas: Artifact Metadata API = store & retrieve metadata about artifacts
Grafeas: Terminology ● Notes: high-level description of types of metadata ○ e.g. Common Vulnerabilities and Exposures (CVE) as Vulnerability Note
Grafeas: Terminology ● Notes: high-level description of types of metadata ○ e.g. Common Vulnerabilities and Exposures (CVE) as Vulnerability Note ● Occurrences: instance of note in an artifact ○ e.g. CVE presence in an image
Grafeas: Terminology ● Notes: high-level description of types of metadata ○ e.g. Common Vulnerabilities and Exposures (CVE) as Vulnerability Note ● Occurrences: instance of note in an artifact ○ e.g. CVE presence in an image
Grafeas: Terminology (cont'd) ● Resource URL: identifier for artifact in Occurrence
Grafeas: Terminology (cont'd) ● Resource URL: identifier for artifact in Occurrence
Grafeas: Terminology (cont'd) ● Resource URL: identifier for artifact in Occurrence ● Kind specific schemas
Grafeas: Deployment Note // An artifact that can be deployed in some runtime. message DeploymentNote { // Required. Resource URI for the artifact being deployed. repeated string resource_uri = 1; }
Grafeas: Deployment Occurrence // The period during which some deployable was active in a runtime. message DeploymentOccurrence { // Identity of the user that triggered this deployment. string user_email = 1; // Required. Beginning of the lifetime of this deployment. google.protobuf.Timestamp deploy_time = 2; // Output only. Resource URI for the artifact being deployed taken from the deployable field with the same name. repeated string resource_uri = 6; ...}
Observability with Grafeas Code Checkin Test & Verification Write code Build Image Deploy to Production QA
Grafeas Open artifact metadata standard with contributions from the industry Audit and govern your software supply chain Knowledge base for on-premises and cloud clusters API with pluggable storage backendsgithub.com/grafeas/grafeas grafeas-users@googlegroups.com grafeas-dev@googlegroups.com @Grafeasio
In This Talk Software Supply Chain Management Kritis Grafeas Kritis & Grafeas 0.1.0 1 2 3 4
In This Talk Software Supply Chain Management Kritis Grafeas Kritis & Grafeas 0.1.0 1 2 3 4
Coming soon... 0.1.0
Goals Enable users to start experimenting with Kritis and Grafeas Move towards hybrid-cloud support Gather community feedback 0.1.0
0.1.0 Scope Standalone Kritis on Kubernetes with standalone Grafeas
0.1.0 User Journeys Allow deployment of a container to Kubernetes cluster Block deployment of a unadmitted container to the cluster
● Grafeas: ○ Helm chart for Grafeas & published image ○ Standalone Grafeas server with Postgres storage backend ○ Basic support for Go client library Features 0.1.0
● Grafeas: ○ Helm chart for Grafeas & published image ○ Standalone Grafeas server with Postgres storage backend ○ Basic support for Go client library ● Kritis: ○ GenericAttestationPolicy ○ Default admittance fallback policy is well-defined ○ Configurable Features 0.1.0
Learn more and follow along! github.com/grafeas/{grafeas,kritis} Google Groups: {grafeas,kritis}-users, grafeas-dev @grafeasio 0.1.0 #talk-aysylu-greenberg

More Related Content

PDF
Software Supply Chain Management with Grafeas and Kritis
byAysylu Greenberg
 
PDF
Software Supply Chain Management with Grafeas and Kritis
byAysylu Greenberg
 
PDF
Binary Authorization in Kubernetes
byAysylu Greenberg
 
PDF
Software Supply Chains for DevOps @ InfoQ Live 2021
byAysylu Greenberg
 
PDF
MesosCon Asia Keynote: Replacing a Jet Engine Mid-flight
byAysylu Greenberg
 
PDF
An oss api layer for your cassandra
byCédrick Lunven
 
PDF
Leveraging Gradle @ Netflix (Madrid GUG Feb 2, 2021)
byRoberto Pérez Alcolea
 
PDF
In graph we trust: Microservices, GraphQL and security challenges
byMohammed A. Imran
 
Software Supply Chain Management with Grafeas and Kritis
byAysylu Greenberg
 
Software Supply Chain Management with Grafeas and Kritis
byAysylu Greenberg
 
Binary Authorization in Kubernetes
byAysylu Greenberg
 
Software Supply Chains for DevOps @ InfoQ Live 2021
byAysylu Greenberg
 
MesosCon Asia Keynote: Replacing a Jet Engine Mid-flight
byAysylu Greenberg
 
An oss api layer for your cassandra
byCédrick Lunven
 
Leveraging Gradle @ Netflix (Madrid GUG Feb 2, 2021)
byRoberto Pérez Alcolea
 
In graph we trust: Microservices, GraphQL and security challenges
byMohammed A. Imran
 

What's hot

PDF
From Zero to DevSecOps in 60 Minutes - DevTalks Romania - Cluj-Napoca
byjerryhargrove
 
PDF
DevSecCon Singapore 2018 - Remove developers’ shameful secrets or simply rem...
byDevSecCon
 
PDF
use case ibm k8s_service+devops
byShoichiro Sakaigawa
 
PDF
What's Missing? Microservices Meetup at Cisco
byAdrian Cockcroft
 
PDF
Devopsdays.pl 2015 krzysztof_debski (2)
byKrzysztof Debski
 
PDF
DevSecCon London 2018: Open DevSecOps
byDevSecCon
 
PDF
Cloud-native Java EE-volution
byQAware GmbH
 
PDF
The DevSecOps Builder’s Guide to the CI/CD Pipeline
byJames Wickett
 
PDF
Azure Academyadi: Introduction to GitHub and AzureDevOps
byLorenzo Barbieri
 
PDF
Everything-as-code: DevOps und Continuous Delivery aus Sicht des Entwicklers.
byQAware GmbH
 
PPTX
DevOps to DevSecOps Journey..
bySiddharth Joshi
 
PPTX
Velocity 2019 making s3 more resilient using lambda@edge- velocity v1 (1)
byJúlia Biró
 
PDF
NYIT DSC/ Spring 2021 - Introduction to DevOps (CI/CD)
byHui (Henry) Chen
 
PDF
Using the SDACK Architecture on Security Event Inspection
byYu-Lun Chen
 
PDF
Microxchg Microservices
byAdrian Cockcroft
 
PDF
Preventing Supply Chain Attacks on Open Source Software
byAll Things Open
 
PPTX
Perforce Innovations Showcase 
byPerforce
 
PDF
Controlling your race with Micrometer, Spring Boot and Cloud Foundry
byKo Turk
 
PPTX
A Guide to Event-Driven SRE-inspired DevOps
byAndreas Grabner
 
PDF
Controlling your race with Micrometer, Spring Boot and Cloud Foundry @Geekle
byKo Turk
 
From Zero to DevSecOps in 60 Minutes - DevTalks Romania - Cluj-Napoca
byjerryhargrove
 
DevSecCon Singapore 2018 - Remove developers’ shameful secrets or simply rem...
byDevSecCon
 
use case ibm k8s_service+devops
byShoichiro Sakaigawa
 
What's Missing? Microservices Meetup at Cisco
byAdrian Cockcroft
 
Devopsdays.pl 2015 krzysztof_debski (2)
byKrzysztof Debski
 
DevSecCon London 2018: Open DevSecOps
byDevSecCon
 
Cloud-native Java EE-volution
byQAware GmbH
 
The DevSecOps Builder’s Guide to the CI/CD Pipeline
byJames Wickett
 
Azure Academyadi: Introduction to GitHub and AzureDevOps
byLorenzo Barbieri
 
Everything-as-code: DevOps und Continuous Delivery aus Sicht des Entwicklers.
byQAware GmbH
 
DevOps to DevSecOps Journey..
bySiddharth Joshi
 
Velocity 2019 making s3 more resilient using lambda@edge- velocity v1 (1)
byJúlia Biró
 
NYIT DSC/ Spring 2021 - Introduction to DevOps (CI/CD)
byHui (Henry) Chen
 
Using the SDACK Architecture on Security Event Inspection
byYu-Lun Chen
 
Microxchg Microservices
byAdrian Cockcroft
 
Preventing Supply Chain Attacks on Open Source Software
byAll Things Open
 
Perforce Innovations Showcase 
byPerforce
 
Controlling your race with Micrometer, Spring Boot and Cloud Foundry
byKo Turk
 
A Guide to Event-Driven SRE-inspired DevOps
byAndreas Grabner
 
Controlling your race with Micrometer, Spring Boot and Cloud Foundry @Geekle
byKo Turk
 

Similar to Software Supply Chain Observability with Grafeas and Kritis

PPTX
Securing microservices continuous delivery using grafeas and kritis
byVishal Banthia
 
KEY
Greasing The Wheels
byAman Kohli
 
PPTX
Reliability at scale
bypraveen shukla
 
PDF
Tracy Miranda_DevOps Loop, May 2022.pdf
byVMware Tanzu
 
PDF
Agile integration: Decomposing the monolith
byJudy Breedlove
 
PDF
DevSecOps: The Open Source Way
byGordon Haff
 
PDF
How to Secure Your Kubernetes Software Supply Chain at Scale
byAnchore
 
PDF
CRA_ Secure Your Future before CRA Hits.pdf
byMario Fahlandt
 
PPTX
Supply Chain Solutions for Modern Software Development
bySonatype
 
PPTX
"Building Trust: Strengthening Your Software Supply Chain Security", Serhii V...
byFwdays
 
PPTX
Patching at Scale
byJason O'Rourke
 
PPTX
2019 04-18 -DevSecOps-software supply chain
byCameron Townshend
 
PDF
5 practical operability techniques - Matthew Skelton - SkillsMatter 2018
byMatthew Skelton
 
PDF
Александр Махомет "Beyond the code или как мониторить ваш PHP сайт"
byFwdays
 
PDF
5 practical operability techniques for teams - Matthew Skelton - ADDO 2018
byConflux
 
PPTX
The Rocky Cloud Road
byGert Drapers
 
PDF
From DevOps to DevSecOps: Evolution of Secure Software Development
byScalaCode
 
PDF
Detailed Technical Due Diligence Check List
byAlexander Natskovich
 
PDF
Lessons learned from writing over 300,000 lines of infrastructure code
byYevgeniy Brikman
 
PDF
Continuous Delivery: 5 years later (Incontro DevOps 2018)
byGiovanni Toraldo
 
Securing microservices continuous delivery using grafeas and kritis
byVishal Banthia
 
Greasing The Wheels
byAman Kohli
 
Reliability at scale
bypraveen shukla
 
Tracy Miranda_DevOps Loop, May 2022.pdf
byVMware Tanzu
 
Agile integration: Decomposing the monolith
byJudy Breedlove
 
DevSecOps: The Open Source Way
byGordon Haff
 
How to Secure Your Kubernetes Software Supply Chain at Scale
byAnchore
 
CRA_ Secure Your Future before CRA Hits.pdf
byMario Fahlandt
 
Supply Chain Solutions for Modern Software Development
bySonatype
 
"Building Trust: Strengthening Your Software Supply Chain Security", Serhii V...
byFwdays
 
Patching at Scale
byJason O'Rourke
 
2019 04-18 -DevSecOps-software supply chain
byCameron Townshend
 
5 practical operability techniques - Matthew Skelton - SkillsMatter 2018
byMatthew Skelton
 
Александр Махомет "Beyond the code или как мониторить ваш PHP сайт"
byFwdays
 
5 practical operability techniques for teams - Matthew Skelton - ADDO 2018
byConflux
 
The Rocky Cloud Road
byGert Drapers
 
From DevOps to DevSecOps: Evolution of Secure Software Development
byScalaCode
 
Detailed Technical Due Diligence Check List
byAlexander Natskovich
 
Lessons learned from writing over 300,000 lines of infrastructure code
byYevgeniy Brikman
 
Continuous Delivery: 5 years later (Incontro DevOps 2018)
byGiovanni Toraldo
 

More from Aysylu Greenberg

PDF
Zero Downtime Migrations at Scale
byAysylu Greenberg
 
PDF
Zero Downtime Migration
byAysylu Greenberg
 
PPTX
PWL Denver: Copysets
byAysylu Greenberg
 
PDF
Distributed systems in practice, in theory (ScaleConf Colombia)
byAysylu Greenberg
 
PDF
Distributed systems in practice, in theory (JAX London)
byAysylu Greenberg
 
PPTX
Building A Distributed Build System at Google Scale (StrangeLoop 2016)
byAysylu Greenberg
 
PDF
QCon NYC: Distributed systems in practice, in theory
byAysylu Greenberg
 
PDF
Building a Distributed Build System at Google Scale
byAysylu Greenberg
 
PDF
(+ Loom (years 2))
byAysylu Greenberg
 
PDF
Distributed systems in practice, in theory
byAysylu Greenberg
 
PDF
Probabilistic Accuracy Bounds @ Papers We Love SF
byAysylu Greenberg
 
PDF
Benchmarking (JAXLondon 2015)
byAysylu Greenberg
 
PPTX
Loom & Functional Graphs in Clojure @ LambdaConf 2015
byAysylu Greenberg
 
PDF
Benchmarking (DevNexus 2015)
byAysylu Greenberg
 
PDF
Benchmarking (RICON 2014)
byAysylu Greenberg
 
PDF
Benchmarking: You're Doing It Wrong (StrangeLoop 2014)
byAysylu Greenberg
 
PDF
PWL: One VM to Rule Them All
byAysylu Greenberg
 
PDF
Loom at Clojure/West
byAysylu Greenberg
 
PDF
Clojure class
byAysylu Greenberg
 
PDF
Loom and Graphs in Clojure
byAysylu Greenberg
 
Zero Downtime Migrations at Scale
byAysylu Greenberg
 
Zero Downtime Migration
byAysylu Greenberg
 
PWL Denver: Copysets
byAysylu Greenberg
 
Distributed systems in practice, in theory (ScaleConf Colombia)
byAysylu Greenberg
 
Distributed systems in practice, in theory (JAX London)
byAysylu Greenberg
 
Building A Distributed Build System at Google Scale (StrangeLoop 2016)
byAysylu Greenberg
 
QCon NYC: Distributed systems in practice, in theory
byAysylu Greenberg
 
Building a Distributed Build System at Google Scale
byAysylu Greenberg
 
(+ Loom (years 2))
byAysylu Greenberg
 
Distributed systems in practice, in theory
byAysylu Greenberg
 
Probabilistic Accuracy Bounds @ Papers We Love SF
byAysylu Greenberg
 
Benchmarking (JAXLondon 2015)
byAysylu Greenberg
 
Loom & Functional Graphs in Clojure @ LambdaConf 2015
byAysylu Greenberg
 
Benchmarking (DevNexus 2015)
byAysylu Greenberg
 
Benchmarking (RICON 2014)
byAysylu Greenberg
 
Benchmarking: You're Doing It Wrong (StrangeLoop 2014)
byAysylu Greenberg
 
PWL: One VM to Rule Them All
byAysylu Greenberg
 
Loom at Clojure/West
byAysylu Greenberg
 
Clojure class
byAysylu Greenberg
 
Loom and Graphs in Clojure
byAysylu Greenberg
 

Recently uploaded

PDF
eresource Xcel ERP for Maunfacturing - Best Manufacturing ERP for SME
byeresource Infotech Pvt.Ltd
 
PPTX
Prime Teams – Real-Time Employee Monitoring & Project Management Software
byPrime Teams
 
PDF
Versnel innovatie met GitHub Enterprise - Rick Smit GitHub
byDelta-N
 
PDF
Lost Android Phone Recovery_ Steps That Work Fast.pdf
byIsabella Reed
 
PDF
Odoo ERP Implementation Setup: Step-by-Step Process
byShiv Technolabs Pvt. Ltd.
 
PPTX
How CFD Simulations Support Sustainable Data Center Design Optimization
byWeb Synergies
 
PPTX
‘Analyzing Application Logs Using AI’ Webinar
byTier1 app
 
PDF
Taxi App UIUX Design for Seamless Ride Booking
byV3CUBE TECHNOLABS
 
PDF
openstack_operations_slides_version1.3_pp.pdf
byssuser47d511
 
PDF
Routing Guidelines: Unlocking Smarter Query Routing in MySQL Architectures
byMiguel Araújo
 
PPTX
Chapter Two Logic and Language - Copy.pptx
byGediyonBelay
 
PPTX
Connecting to MCP Servers in OutSystems Platform
byOzanCali
 
PDF
MySQL Routing Guidelines: Designing Smarter Query Routing Together
byMiguel Araújo
 
PDF
Metrics, Logs, Traces, and Mayhem_ Introducing an observability adventure gam...
byImma Valls Bernaus
 
PDF
SAP ERP to SAP S_4HANA Cloud Private Edition Delta Scope
bychuck78
 
PDF
On Demand Massage Therapist Booking App Development
byV3CUBE TECHNOLABS
 
PDF
Complete iOS Delivery App Features & Admin Tools
byShiv Technolabs Pvt. Ltd.
 
PPTX
40m_wAIred_DigitalPlatformRabobank_10022026.pptx
bySimonedeGijt
 
PDF
Langchain4J – An Introduction for Impatient Developers
byJuarez Junior
 
PDF
Introduction to Modern Artificial Intelligence.pdf
byAI n Dot Net
 
eresource Xcel ERP for Maunfacturing - Best Manufacturing ERP for SME
byeresource Infotech Pvt.Ltd
 
Prime Teams – Real-Time Employee Monitoring & Project Management Software
byPrime Teams
 
Versnel innovatie met GitHub Enterprise - Rick Smit GitHub
byDelta-N
 
Lost Android Phone Recovery_ Steps That Work Fast.pdf
byIsabella Reed
 
Odoo ERP Implementation Setup: Step-by-Step Process
byShiv Technolabs Pvt. Ltd.
 
How CFD Simulations Support Sustainable Data Center Design Optimization
byWeb Synergies
 
‘Analyzing Application Logs Using AI’ Webinar
byTier1 app
 
Taxi App UIUX Design for Seamless Ride Booking
byV3CUBE TECHNOLABS
 
openstack_operations_slides_version1.3_pp.pdf
byssuser47d511
 
Routing Guidelines: Unlocking Smarter Query Routing in MySQL Architectures
byMiguel Araújo
 
Chapter Two Logic and Language - Copy.pptx
byGediyonBelay
 
Connecting to MCP Servers in OutSystems Platform
byOzanCali
 
MySQL Routing Guidelines: Designing Smarter Query Routing Together
byMiguel Araújo
 
Metrics, Logs, Traces, and Mayhem_ Introducing an observability adventure gam...
byImma Valls Bernaus
 
SAP ERP to SAP S_4HANA Cloud Private Edition Delta Scope
bychuck78
 
On Demand Massage Therapist Booking App Development
byV3CUBE TECHNOLABS
 
Complete iOS Delivery App Features & Admin Tools
byShiv Technolabs Pvt. Ltd.
 
40m_wAIred_DigitalPlatformRabobank_10022026.pptx
bySimonedeGijt
 
Langchain4J – An Introduction for Impatient Developers
byJuarez Junior
 
Introduction to Modern Artificial Intelligence.pdf
byAI n Dot Net
 

Software Supply Chain Observability with Grafeas and Kritis