Commit Virtual 2020: How to Build a Compromise Resilient CI/CD
Channel: GitLab
Date: 25/09/2020

Speaker: Trishank Karthik Kuppusamy

CI/CD is critical to any DevOps operation today, but when attackers compromise it, they get to distribute malicious software to millions of unsuspecting users. We present how Datadog used TUF and in-toto to develop, to the best of our knowledge, the industry’s first end-to-end verified pipeline that automatically builds integrations for the Datadog agent. That is, even if this pipeline is compromised, users should not be able to install malware. We will show a demonstration of our pipeline in production being used to protect users of the Datadog agent, and describe how you can use TUF + in-toto to secure your own pipeline.

Get in touch with Sales: http://bit.ly/2IygR7z