30-minute talk on the evolving threat landscape around Helm charts in public repositories. We’ll discuss real-world incidents such as the Codecov supply chain attack and hypothetical attack vectors like 'ChartSploit', highlighting how seemingly benign configurations can be exploited. Topics include anatomy of vulnerable charts, risk areas (RBAC misconfigurations, dependency vulnerabilities), and actionable strategies to secure Kubernetes environments—auditing deployments, verifying chart integrity, enforcing strict access controls, and adopting DevSecOps practices.
talk-data.com
N
Speaker
Nigel Douglas
1
talks
Head of Developer Relations
Cloudsmith
Nigel Douglas is the Head of Developer Relations at Cloudsmith. He champions Cloudsmith’s developer ecosystem by creating compelling educational content, engaging with developer communities, and promoting Cloudsmith as the go-to solution for artifact management and supply chain security. Nigel helps build and shape the DevOps community through events, tutorials, and innovative programs.
Bio from: Are your Helm charts secure? Uncovering hidden supply chain threats
Filtering by:
Identifying vulnerabilities in public Kubernetes Helm charts
×
Filter by Event / Source
Talks & appearances
Showing 1 of 3 activities