Operating a Production TUF Repository - Kairo De Araujo, TestifySec & Fredrik Skogman, Github
Channel: CNCF [Cloud Native Computing Foundation]
Date: 2024-03-23

Don't miss out! Join us at our next Flagship Conference: KubeCon + CloudNativeCon North America in Salt Lake City from November 12 - 15, 2024. Connect with our current graduated, incubating, and sandbox projects as the community gathers to further the education and advancement of cloud native computing. Learn more at https://kubecon.io

Operating a Production TUF Repository - Kairo De Araujo, TestifySec & Fredrik Skogman, Github

There are many aspects and processes to consider when it comes to deploying a TUF repository. Topics range from managing the security of the root, how resilient it can be, how much of the work can be automated, and the infrastructure requirements. Learn how: * GitHub uses tuf-on-ci to create a secure update mechanism for important artifacts in a deployment that allows for the repository maintainers to sleep well at night. * Repository Services for TUF (RSTUF) can secure the content distribution from a public repository such as RubyGems to a private corporative artifacts repository that uses JFrog Artifactory. https://github.com/theupdateframework/tuf-on-ci https://github.com/repository-service-tuf/repository-service-tuf