Name: Notary Project: The Key To Secure Software Supply Chain - Yi Zha, Microsoft & Guillaume Gill, OrangeLogic
Start: 2025-04-04T13:45:00+0100
End: 2025-04-04T14:15:00+0100

In-person
1-4 April 2025
Learn More and Register to Attend

The Sched app allows you to build your schedule but is not a substitute for your event registration. You must be registered for KubeCon + CloudNativeCon Europe 2025 to participate in the sessions. If you have not registered but would like to join us, please go to the event registration page to purchase a registration.

Please note: This schedule is automatically displayed in British Summer Time (BST) (UTC +1). To see the schedule in your preferred timezone, please select from the drop-down menu to the right, above "Filter by Date." The schedule is subject to change and session seating is available on a first-come, first-served basis.

Friday April 4, 2025 13:45 - 14:15 BST

Level 3 | ICC Capital Suite 14-16

Ensuring a secure software supply chain for container images is crucial in the cloud-native ecosystem. The Notary Project provides a robust solution for signing and validating container images and other artifacts, ensuring they come from trusted sources and have not been tampered with before use. In this session, Guillaume from OrangeLogic will discuss their enterprise practice of using the Notary Project to secure container images during the transformation to a cloud-native approach. Attendees will learn about the challenges faced, lessons learned, and benefits of using the Notary Project. Additionally, attendees will get a deep dive into the Notary Project, covering: mission and strategy, security audit, New scenarios and Roadmap. Join this session to discover why the Notary Project is the key to a secure software supply chain. Whether you’re new to container security, an experienced professional, or interested in contributing to the Notary Project, this session is not to be missed!

Speakers

Yi Zha

Senior Product Manager, Microsoft

Yi is a senior product manager on the Cloud Native Security and Registries team at Microsoft, dedicated to developing best-in-class solutions and tools that help Azure customers secure their software supply chain. He also plays a key role as a maintainer for the CNCF projects Notary... Read More →

Guillaume Gill

Lead Platform Engineer, OrangeLogic

Guillaume comes from software development on the web, for high traffic ecommerces and ERP, Then he migrated to the pure sysadmin side after 8 years, to start learning new skills. He finally came DevOps immediately by helping both teams working more efficiently and automate the processes.He's... Read More →

Friday April 4, 2025 13:45 - 14:15 BST
Level 3 | ICC Capital Suite 14-16

Maintainer Track, Notary

KubeCon + CloudNativeCon Europe 2025

Yi Zha

Guillaume Gill

Sign up or log in to save this to your schedule, view media, leave feedback and see who's attending!