Securing Your Software Supply Chain with Sigstore
About this Course
Building and distributing software that is secure throughout its entire lifecycle can be challenging, leaving many projects unprepared to build securely by default. Attacks and vulnerabilities can emerge at any step of the chain, from writing to packaging and distributing software to end users. Sigstore is one of several innovative technologies that have emerged to improve the integrity of the software supply chain, reducing the friction developers face in implementing security within their daily work. This course is designed with end users of Sigstore tooling in mind: software developers, DevOps engineers, security engineers, software maintainers, and related roles. To make the best of this course, you will need to be familiar with Linux terminals and using command line tools. You will also need to have intermediate knowledge of cloud computing and DevOps concepts, such as using and building containers and CI/CD systems like GitHub actions. This course will introduce you to Cosign, Fulcio, and Rekor, the tools under the Sigstore umbrella, explaining how they support a more secure software supply chain. You will learn how to employ these tools throughout your software development, testing, and distribution processes. Additionally, those who use or implement your software will be able to verify its authenticity through tamper-resistant public logs. Upon completing this course, you will be able to inform your organization’s security strategy and build software more securely by default.Created by: The Linux Foundation
Level: Introductory
![](https://prod-discovery.edx-cdn.org/media/course/image/5fe02df9-c831-4911-a0da-b63901bb7659-3415b6001f30.small.jpeg)
Related Online Courses
Organizations need skilled, forward-thinking Big Data practitioners who can apply their business and technical skills to unstructured data such as tweets, posts, pictures, audio files, videos,... more
About the Database Series of Courses "Databases" was one of Stanford's three inaugural massive open online courses in the fall of 2011. It has been offered in synchronous and then in self-paced... more
This course introduces you to container technologies and how they can be used to modernize your applications, as well as exploring how different AWS services can be used to manage and orchestrate... more
El mayor activo de las empresas actuales son sus datos, datos que, mayoritariamente se alojan en bases de datos relacionales en línea. Prácticamente todos los sistemas de gestión de bases de da... more
A gentle beginner introduction to the world of programming, using the Python programming language. No prior experience necessary. Teaches the Python programming language. Prepares you for data... more