Name: Newest Supply Chain Security Features in Buildkit v0.11
Start: 2023-05-08T20:00:00+03:00
End: 2023-05-08T22:00:00+03:00

The Docker community is one of the communities that take software supply chain security risks seriously. Accordingly, they try to add features to products both Docker Desktop, Docker CLI, and BuildKit to mitigate the risks of the software supply chain attacks, such as generating SBOMs, displaying the vulnerability information, providing SLSA provenance based on build information, etc.

The [BuildKit (v0.11)](https://github.com/moby/buildkit/releases/tag/v0.11.0) release came with amazing features such as [SLSA Provenance](https://slsa.dev/provenance/v0.2), [OCI Image Layout](https://cd.foundation/blog/community/2022/12/20/no-more-additional-network-requests-enter-oci-image-layout/)&annotations, [#SBOM](https://twitter.com/i/communities/1590611905651040256/hashtag/SBOM), and [reproducible builds](https://reproducible-builds.org/) through SOURCE_DATE_EPOCH build arg. All are explained in a very well format in this blog post, thanks to [Justin Chadwell](https://twitter.com/jedevc).
➡️ **[Highlights from the BuildKit v0.11 Release](https://www.docker.com/blog/highlights-buildkit-v0-11-release/)**

Batuhan Apaydın (developer-guy)

Docker Istanbul

Docker User Group

Organizes great meet ups and provides Docker goodies


Docker, Inc

Acedemand

KWORKS

Technology

Linux

Cloud Computing

Open Source

Continuous Integration

Configuration Management

Data Center and Operations Automation

DevOps

IaaS (Infrastructure as a Service)

PaaS (Platform as a Service)

Virtualization

Infrastructure as Code

OpenStack

Continuous Delivery

Web Operations

Continuous Deployment

Docker

Batuhan Apaydın a.k.a. developer-guy has been very active in Software Supply Chain Security space. He is eager to learn more about it in all aspects because he know this topic will become one of the upmost critical topics that everybody has to be concerned. Towards that direction, he won the “Best Sigstore Evangelist” award and wrote a blog post about it to encourage to the next one and took an active role in first-ever SigstoreCon by being one of the Program Commitee members of the event and created a Twitter Community about Software Supply Chain Security and that community is now about 500+ people joined. He also tries to be active in the Turkey by organizing in-person, virtual meetups, workshops. He is the organizer of the two important organization in Turkey named DevOpsTr, CNCF Istanbul Chapter, Cloud Native Turkiye. He is also one of the organizers of the KCD Turkiye, besides that he become one of the first CNCF Ambassadors from Turkiye. He is also an active contributor of several CNCF projects including ko, Flux, and Kyverno. He also enjoys writing technical blog posts and wrote 10+ blog posts and all of them are published on important official websites including Kyverno, CD Foundation, Flux, Sigstore, etc. Lastly, he also applied for Docker Captain Program and became one of the first Docker Captains from Turkiye, and he is very proud of that.












Docker Istanbul

Docker, Inc

Acedemand

KWORKS

Newest Supply Chain Security Features in Buildkit v0.11

Docker Istanbul

Detaylar

İlgili konular

Sponsorlar

Docker, Inc

Acedemand

KWORKS

Bunları da sevebilirsiniz