Container Security: Image Signing with Notary

preview_player
Показать описание
Updates for software libraries, software package managers, and repositories software usually does not remain static, and updates are necessary to add new functionality or remove vulnerabilities. When we apply these updates, it's important to provide security mechanisms for updating software such as applying patches and updates to Software Libraries. There is a need to understand better how the updates to software should be managed.

Additional Resources:
*Understand the Notary service architecture:

Music Credit:

  1. Nebulaworks
  2. #Nebulaworks
  3. #Docker
  4. #ContainerSecurity
  5. #Notary
Рекомендации по теме
Container Security: Image 0:11:03

Container Security: Image Signing with Notary

Signing and Verifying 0:14:12

Signing and Verifying Container Images With Sigstore Cosign and Kyverno

Keyless container image 0:11:39

Keyless container image signing with GitLab

Sign Your Container 0:11:53

Sign Your Container Images with Cosign, GitHub Actions and GitHub Container Registry (How To)

Container Image Signing 0:57:24

Container Image Signing with AWS Signer and Amazon EKS

Container Security Explained 0:06:51

Container Security Explained

Secure Container Image 0:23:34

Secure Container Image Signing with Cosign and OPA

Signing Container Images 0:04:27

Signing Container Images | CodeSign Protect Technical Demo, Venafi

Get Smart in 0:07:29

Get Smart in Five Minutes: What are FedRAMP's Container Security Requirements?

Docker Content Trust 0:06:43

Docker Content Trust Image Signing within Docker Datacenter

Docker security best 0:11:10

Docker security best practices| How to secure your container.

Securing Your Container 0:11:19

Securing Your Container Images with Clair Image Scanner

AWS re:Invent 2021 0:57:31

AWS re:Invent 2021 - Up-level your container image security with the latest from Amazon ECR

Securing Container Images 0:47:08

Securing Container Images and Binaries with Cosign and Sigstore

Container Image Signing 0:13:58

Container Image Signing With Cosign and Jenkins

Who's Verifying Your 0:25:37

Who's Verifying Your Signatures? Approaching Private Container Image Signing - Ethan Lowman, Da...

Container Signing – 0:14:38

Container Signing – Set up SignServer and Cosign to Sign Container Images

Docker Container Security 0:36:21

Docker Container Security

6 Container Image 0:05:22

6 Container Image Security Best Practices

Spicing up Container 0:36:23

Spicing up Container Image Security with SLSA & GUAC - Ian Lewis, Google

Image vs Container: 0:01:30

Image vs Container: Key Differences Explained | Container Security | Part 3

HashiCorp Tools for 0:40:52

HashiCorp Tools for Container Security Workflows

How to secure 0:03:48

How to secure Docker Containers - Container Security Best Practices

A Docker image 0:26:28

A Docker image walks into a Notary - Diogo Mónica

Комментарии
Автор

Good detailed explanation about Notary server and Notary signer.

GunjanShah
Автор

Nice one ..have few questions here! When you say "the keys that we use to sign the image" are verified in the Notary server, is that the Private Delegation key you are talking about? Can you please let me know what happens when notary init repoA is executed, does that create the Root Key and Repo Key (Not sure what does content trust metadata is generated). Also can you please help us understand the need for Root Key to back up.

MONISHGURU