In this special live edition of ITQ Cloud Native Chronicles, recorded at Red Hat Summit Connect Nieuwegein, Sander Harrewijnen talks with Markus Nagel, Technical Marketing Manager at Red Hat, about the importance of secure and automated software supply chains.
Markus explains how Red Hat Developer Hub, Tekton Chains, and Trusted Artifact Signer simplify signing, verification, and SALSA compliance while helping developers stay focused on building great software. They discuss how automation and platform engineering can make security seamless from commit to production without slowing down innovation.
Watch more episodes of ITQ Cloud Native Chronicles for insights on Kubernetes, OpenShift, AI, and hybrid cloud transformation.
Explore more ITQ podcasts:https://www.youtube.com/playlist?list=PLN6J95LxW2cFk9KbdIkXqMCmGwaFnTMaB
👉Learn more about ITQ Cloud Native: https://itq.eu/cloud-native
#itqcloudnativechronicles #redhatsummit #redhat #softwaresecurity #supplychainsecurity #developerhub #tekton #kubernetes #cloudnative #openshift #hybridcloud #itq #platformengineering #salsa #ci #cd #devsecops
00:00 - Intro from Red Hat Summit Connect Nieuwegein
00:30 - What Is a Secure Software Supply Chain
01:32 - Making Security Seamless for Developers
03:13 - How Red Hat Developer Hub Improves the Developer Experience
04:20 - Signing Commits and Trusted Artifact Signer Explained
06:08 - SALSA Compliance and Verifying Build Integrity
08:30 - Automating SBOMs and Vulnerability Management
10:16 - Freeing Developers from Manual Security Tasks
12:04 - Tekton Chains and Argo CD Automation
15:19 - Integrating Supply Chain Security into CI/CD Pipelines
17:05 - Closing Thoughts and Wrap-Up from Sander
