Register for Waitlist
,
This class if full now. You can register on the wait list to be notified when a seat becomes available.
Securing your Software Supply chain with Sigstore Training
Live Online & Classroom Enterprise Training
This course introduces Sigstore, an open-source solution for signing, verifying, and protecting software artifacts. Learners will understand how Sigstore helps secure modern software supply chains by providing transparency, integrity, and trust without managing long-lived secrets.
Looking for a private batch ?
REQUEST A CALLBACKNeed help finding the right training?
-
Enterprise Reporting
-
Lifetime Access
-
CloudLabs
-
24x7 Support
-
Real-time code analysis and feedback
What is Securing your Software Supply chain with Sigstore Training about?
What are the objectives of Securing your Software Supply chain with Sigstore Training ?
Who is Securing your Software Supply chain with Sigstore Training for?
What are the prerequisites for Securing your Software Supply chain with Sigstore Training?
Available Training Modes
Live Online Training
1 DaysCourse Outline Expand All
Expand All
- Overview of Sigstore and its purpose
- Software supply chain security challenges
- Key components of the Sigstore ecosystem
- Benefits of keyless signing
- Use cases in modern DevSecOps
- Introduction to Cosign functionality
- Container image and artifact signing
- Signature verification workflows
- Integration with CI/CD pipelines
- Security and compliance benefits
- Role of Fulcio in Sigstore
- Keyless certificate issuance process
- Identity-based authentication model
- Short-lived certificates concept
- Trust and security assurances
- Purpose of transparency logs
- How Rekor records signatures and metadata
- Tamper-evident and immutable logging
- Auditing and traceability benefits
- Integration with Sigstore tools
- Role of policy enforcement in Kubernetes
- Admission control using Policy Controller
- Verifying signed images before deployment
- Defining and managing security policies
- Enhancing cluster supply chain security
- Overview of the Sigstore open-source community
- Contribution opportunities and roles
- Governance and project roadmap
- Community support channels
- Learning resources and next steps
Who is the instructor for this training?
The trainer for this Securing your Software Supply chain with Sigstore Training has extensive experience in this domain, including years of experience training & mentoring professionals.
Reviews
Previous
Next
My outlook on training changed completely after attending SpringPeople BPC training. The content, the trainer and infrastructure at SpringPeople were top notch and perfectly in tune with the industry requirements. Regardless to say, training is now something that I look forward to to. Kudos to everyone at SpringPeople!
Shweta Priya
Sony
I attended the 3-day AngularJs training at SpringPeople. The trainer was an industry veteran with vast experience in the subject. Notably, the hands-on training, and the Q&A session stood out. Overall, I found SpringPeople a great place to learn with excellent facilities and great trainers. Would recommend SpringPeople to my colleagues and friends.
Swati Singh
GE
I attended the training on API Design for Mulesoft. The sessions were well planned and value-laden. I benefited immensely from the hands-on experience enabled through virtual labs. I would like to specifically commend the efficiency of the support team who were always available to resolve my concerns.
Nikhil Kohli
Stryker
I attended the jQuery training batch, conducted by Mr. Vijay, an SME who did a thorough coverage of all the essentials. He took us through concepts such as jQuery animations, event handlers, plugins, and jQuery-UI by small programs, very easily. The sessions were useful and well structured. By the end of the training, I was well equipped to develop a SPA on Product Management System. Overall, the learning experience at SpringPeople was great!
Heena Rajan
Mindtree
