A practical workshop exploring threats, attack scenarios, and strategies for securing Helm charts using Cloudsmith's artifact management. Topics include verifying assets (public Helm charts, dependencies, and images), automating compliance with Trivy, and enforcing runtime OPA Gatekeeper policies to protect Kubernetes deployments. Learn to audit and manage Helm charts before distribution to prevent supply-chain attacks. Bonus: hands-on Instruqt lab analyzing insecure chart templates and demonstrating how to scan and validate Helm charts prior to production Kubernetes deployment.
talk-data.com
N
Speaker
Nigel Douglas
1
talks
Head of Developer Relations
Cloudsmith
Nigel Douglas is the Head of Developer Relations at Cloudsmith. He champions Cloudsmith’s developer ecosystem by creating compelling educational content, engaging with developer communities, and promoting Cloudsmith as the go-to solution for artifact management and supply chain security. Nigel helps build and shape the DevOps community through events, tutorials, and innovative programs.
Bio from: Are your Helm charts secure? Uncovering hidden supply chain threats
Filtering by:
Are your Helm charts secure? Uncovering hidden supply chain threats
×
Filter by Event / Source
Talks & appearances
Showing 1 of 3 activities