talk-data.com talk-data.com

N

Speaker

Nigel Douglas

1

talks

Head of Developer Relations Cloudsmith

Nigel Douglas is the Head of Developer Relations at Cloudsmith. He champions Cloudsmith’s developer ecosystem by creating compelling educational content, engaging with developer communities, and promoting Cloudsmith as the go-to solution for artifact management and supply chain security. Nigel helps build and shape the DevOps community through events, tutorials, and innovative programs.

Bio from: Are your Helm charts secure? Uncovering hidden supply chain threats

Filtering by: Identifying vulnerabilities in public Kubernetes Helm charts ×

Filter by Event / Source

Talks & appearances

Showing 1 of 3 activities

Search activities →

30-minute talk on the evolving threat landscape around Helm charts in public repositories. We’ll discuss real-world incidents such as the Codecov supply chain attack and hypothetical attack vectors like 'ChartSploit', highlighting how seemingly benign configurations can be exploited. Topics include anatomy of vulnerable charts, risk areas (RBAC misconfigurations, dependency vulnerabilities), and actionable strategies to secure Kubernetes environments—auditing deployments, verifying chart integrity, enforcing strict access controls, and adopting DevSecOps practices.