Beyond signatures: Using TUF and Notary to Secure Software Distribution - Marina Moore, NYU
Talking TUF: Securing Software Distribution
Securing the Software Supply Chain with TUF and Docker
Securing Container Delivery with TUF - Lukas Puehringer, NYU
TUF & Notary help to secure software updates in Kubernetes
When the Going Gets Tough, Get TUF Going! [I] - David Lawrence & Ashwini Oruganti, Docker
Deep Dive: TUF What's New With TUF? - Marina Moore, NYU & Trishank Kuppusamy, Datadog
Whose Sign Is It Anyway? - Marina Moore, NYU & Matthew Riley, Google
Deep Dive: TUF - Justin Cappos, NYU & Trishank Kuppusamy, Datadog
Securing PHP Package Repositories with TUF (Workshop) / DrupalCon North America 2021
Maintaining TUF, a Talk - Joshua Lock, Verizon & Lukas Pühringer, NYU Tandon School of Engineering
Integrity of Docker Images - Signatures, Verification and a Tool for k8s (Philipp Belitz)
Updates from The Update Framework - Lukas Pühringer, NYU & Jussi Kukkonen, VMware
Defending against attacks on package managers - Joshua Lock & Marina Moore | PackagingCon 2021
Cryptographic Signatures: A Building Block Not A Panacea - Marina Moore, NYU
TUF update framework
AWS re:Invent 2020: Securing Bottlerocket updates with TUF and Rust
Notary V1 on Kubernetes Demo
Discovery of Notary v2 & Securing Docker Images - the tech behind "docker scan"
Kubernetes Supply Chain Security: The Software Factory - Andrew Martin, Control Plane