Upgrade to Pro — share decks privately, control downloads, hide ads and more …

Securing the "other" supply chain

Nicolas Byl
May 15, 2019
Technology
0
230

Securing the "other" supply chain

Nicolas Byl

May 15, 2019
Tweet

More Decks by Nicolas Byl

See All by Nicolas Byl
Die Flucht aus der Prototypen-Hölle
nbyl
0
35
Lean Prototyping for Industrial-IoT Projects
nbyl
0
27
DevSecOps - Vom Unikum zur gut geölten Maschine
nbyl
0
83
Securing your software supply chain
nbyl
0
330
Keeping-Up-WithUpstream.pdf
nbyl
0
130
Dr. Kube und der Helm - Anatomie einer CD-Pipeline
nbyl
0
100
Kubernetes - Auf die Cluster, Fertig, Los!
nbyl
0
150
Helm - Kubernetes Deployments richtig gemacht
nbyl
0
120
It's the developers, stupid!
nbyl
0
160

Other Decks in Technology

See All in Technology
地方拠点で エンジニアリングマネージャーってできるの？ 〜地方という制約を楽しむオーナーシップとコミュニティ作り〜
1coin
1
220
次世代KYC活動報告 / 20250219-BizDay17-KYC-nextgen
oidfj
0
250
第13回 Data-Centric AI勉強会, 画像認識におけるData-centric AI
ksaito_osx
0
370
OpenID Connect for Identity Assurance の概要と翻訳版のご紹介 / 20250219-BizDay17-OIDC4IDA-Intro
oidfj
0
270
人はなぜISUCONに夢中になるのか
kakehashi
PRO
6
1.6k
Culture Deck
optfit
0
410
プロセス改善による品質向上事例
tomasagi
2
2.5k
【Developers Summit 2025】プロダクトエンジニアから学ぶ、 ユーザーにより高い価値を届ける技術
niwatakeru
2
1.4k
2.5Dモデルのすべて
yu4u
2
840
2/18/25: Java meets AI: Build LLM-Powered Apps with LangChain4j
edeandrea
PRO
0
110
2025-02-21 ゆるSRE勉強会 Enhancing SRE Using AI
yoshiiryo1
1
240
エンジニアの育成を支える爆速フィードバック文化
sansantech
PRO
3
1k

Featured

See All Featured
Statistics for Hackers
jakevdp
797
220k
Speed Design
sergeychernyshev
27
790
The World Runs on Bad Software
bkeepers
PRO
67
11k
Fashionably flexible responsive web design (full day workshop)
malarkey
406
66k
CoffeeScript is Beautiful & I Never Want to Write Plain JavaScript Again
sstephenson
160
15k
実際に使うSQLの書き方 徹底解説 / pgcon21j-tutorial
soudai
174
51k
Cheating the UX When There Is Nothing More to Optimize - PixelPioneers
stephaniewalter
280
13k
Done Done
chrislema
182
16k
Testing 201, or: Great Expectations
jmmastey
42
7.2k
Git: the NoSQL Database
bkeepers
PRO
427
64k
How to Ace a Technical Interview
jacobian
276
23k
How STYLIGHT went responsive
nonsquared
98
5.4k

Transcript

  1. 1 Nicolas Byl, DevOpsDays Zürich

  2. 2 Storytime 2 https://pxhere.com/de/photo/237

  3. 3 Checklists 3 https://pxhere.com/de/photo/1455425

  4. 4 Compliance 4

  5. 5 5

  6. 6 The castle illusion 6 https://pxhere.com/de/photo/852079

  7. 7 7

  8. 8 8 source code binary

  9. 9 Binary Authorization 9 https://pxhere.com/de/photo/662108

  10. 10 1 0 signature verify

  11. 11 build signature 1 dependency check static code analysis QA

    tests successful release manager sign-off 2 3 4 5 11 1 1 https://pxhere.com/de/photo/661983

  12. 12 Demo 1 2 https://pxhere.com/de/photo/237

  13. 13 Emergencies 1 3 https://pxhere.com/de/photo/499662

  14. 14 Logging is not enough 1 Break-glass deployments should trigger

    an action Abuse must be sanctioned A tool for emergency situations 2 3 4 14 1 4 https://pxhere.com/de/photo/33077

  15. 15 Demo 1 5 https://pxhere.com/de/photo/1140826

  16. 16 How to introduce these concepts? Blockchain? 1 6 https://pxhere.com/de/photo/237

  17. 17 [email protected] 17 http://www.twitter.com/NicolasByl