Software Signing and Verification with Sigstore - Sherif Clinch
Channel: OWASP London
Date: 2022-05-12

Intro by Sherif Mansour.

TALK ABSTRACT:

Last year, we saw an executive order from the US government which included requirements for software supply chain security. Argon of Aqua Security estimate attacks on the software supply chain tripled in 2021 compared to 2020. Securing the software supply chain remains a hot topic. In this talk, we’ll be having a brief look at Sigstore, which helps to secure the software supply chain by reducing the complexity in securely signing and verifying software artifacts such as release files, container images and binaries.

SPEAKER BIO:

Sherif Clinch is the lead engineer for Just Eat Takeaway’s security engineering team. Sherif previously worked as a software engineer, before switching to InfoSec where he’s also worked in AppSec and SecOps roles. He has a particular interest in building and implementing security-focused solutions to problems faced in the industry and sharing his experiences with others.

Better quality video embedded inside Sherif talk: https://youtu.be/vkOzd5BWPdA

This talk was presented at the @OWASPLondon Chapter Meetup on May 10th, 2022 hosted and sponsored by @JUSTEAT  &  @jetevents3329