Part 4: SCA Scanning & Supply Chain Security in Kubernetes CI/CD (Trivy, SBOM, Cosign) скачать в хорошем качестве

Part 4: SCA Scanning & Supply Chain Security in Kubernetes CI/CD (Trivy, SBOM, Cosign)

Part 4: SCA Scanning & Supply Chain Security in Kubernetes CI/CD (Trivy, SBOM, Cosign) In Part 4 of this Secure Production Kubernetes series, we move beyond building secure images and focus on Software Composition Analysis (SCA) and Supply Chain Security inside a real CI/CD pipeline. In this video, I walk through: Running Trivy scans for HIGH & CRITICAL vulnerabilities Uploading SARIF reports to GitHub Security Generating an SBOM (Software Bill of Materials) Signing container images using Cosign Attaching SBOMs to signed images Pushing and verifying image digests securely This is how modern DevSecOps teams prevent vulnerable dependencies from reaching production. We’re not just building containers anymore — We’re verifying, scanning, signing, and securing the entire supply chain. If you're a DevOps engineer, security engineer, this is what production-grade Kubernetes security looks like. #DevSecOps #Kubernetes #CloudSecurity #SupplyChainSecurity #SCA #ContainerSecurity #Docker #Trivy #SBOM #Cosign #CICD #PlatformEngineering