Skip to content

Commit 3fbacd2

Browse files
h4l0genh4l0gen
committed
adding blog page
Signed-off-by: h4l0gen <[email protected]> adding latest blogs Signed-off-by: h4l0gen <[email protected]> adding published date Signed-off-by: h4l0gen <[email protected]>
1 parent 7f926c1 commit 3fbacd2

File tree

2 files changed

+158
-2
lines changed

2 files changed

+158
-2
lines changed

‎config.toml

+7-2
Original file line numberDiff line numberDiff line change
@@ -160,12 +160,17 @@ parent = "community"
160160
url = "https://cloud-native.slack.com/archives/C8NMD3QJ3"
161161
weight = 6
162162

163+
[[menu.main]]
164+
name = "Blogs"
165+
url = "/blogs/"
166+
weight = 4
167+
163168
[[menu.main]]
164169
name = "News"
165170
url = "/news/"
166-
weight = 4
171+
weight = 5
167172

168173
[[menu.main]]
169174
name = "Contact"
170175
url = "/contact/"
171-
weight = 5
176+
weight = 6

‎content/blogs.md

+151
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,151 @@
1+
---
2+
title: Blogs
3+
---
4+
5+
> ## How we securely autoupdate Osquery at Kolide
6+
>
7+
> *Published on: May 23, 2024*
8+
>
9+
> How We Securely Autoupdate Osquery at Kolide using The Update Framework(TUF).
10+
>
11+
> [![ Read more ](https://img.shields.io/badge/Read_more-blue?style=for-the-badge&logoWidth=40)](https://blog.kolide.com/how-we-securely-autoupdate-osquery-at-kolide-b0eda6ad05f6)
12+
13+
---
14+
15+
> ## Security audit of go-tuf The Update Framework
16+
>
17+
> *Published on: August 30, 2023*
18+
>
19+
> In this post, we’ll share the results of a recent security assessment of the Go implementation of TUF. go-tuf is one of the most widely adopted TUF implementations used by many projects, including sigstore
20+
>
21+
> [![ Read more ](https://img.shields.io/badge/Read_more-blue?style=for-the-badge&logoWidth=40)](https://blogs.vmware.com/opensource/2023/08/30/security-audit-of-go-tuf-the-update-framework/)
22+
23+
---
24+
25+
> ## Safety for All with Repository Service for TUF
26+
>
27+
> *Published on: June 6, 2023*
28+
>
29+
> Repository Service for TUF is part of VMware’s broader investment to help improve security across the industry’s software supply chain.
30+
>
31+
> [![ Read more ](https://img.shields.io/badge/Read_more-blue?style=for-the-badge&logoWidth=40)](https://blogs.vmware.com/opensource/2023/06/06/safety-for-all-with-repository-service-for-tuf-2/)
32+
33+
---
34+
35+
> ## Using The Update Framework in Sigstore
36+
>
37+
> *Published on: August 11, 2021*
38+
>
39+
> We use TUF in the Sigstore project to protect our own keys and infrastructure, but we’re also hoping to make it possible for end users to use TUF on their own, using the Sigstore tools. I call this the TUF sandwich!
40+
>
41+
> [![ Read more ](https://img.shields.io/badge/Read_more-blue?style=for-the-badge&logoWidth=40)](https://dlorenc.medium.com/using-the-update-framework-in-sigstore-dc393cfe6b52)
42+
43+
---
44+
45+
> ## Enhancing Software Update Security With TUF (The Update Framework)
46+
>
47+
> *Published on: September 10, 2020*
48+
>
49+
> The Update Framework (TUF) is a flexible, open source framework and specification that developers can adopt into any software update system
50+
>
51+
> [![ Read more ](https://img.shields.io/badge/Read_more-blue?style=for-the-badge&logoWidth=40)](https://blogs.vmware.com/opensource/2020/09/10/tuf-enhancing-software-update-security/)
52+
53+
---
54+
55+
> ## Secure Software Updates via TUF — Part 2
56+
>
57+
> *Published on: September 1, 2020*
58+
>
59+
> TUF secures the software update delivery system using mechanisms such as roles, their signatures (PKI), threshold number of signatures, file hashes, and file size.
60+
>
61+
> [![ Read more ](https://img.shields.io/badge/Read_more-blue?style=for-the-badge&logoWidth=40)](https://medium.com/@mulgundmath/secure-software-updates-via-tuf-part-2-412c6a2b10ab)
62+
63+
---
64+
65+
> ## Secure Software Updates via TUF — Part 1
66+
>
67+
> *Published on: August 18, 2020*
68+
>
69+
> Software is all around us and we see them getting regularly updated. How secure are these updates? What are the reasons for securing them? How do they (secure updates) work under the hood?
70+
>
71+
> [![ Read more ](https://img.shields.io/badge/Read_more-blue?style=for-the-badge&logoWidth=40)](https://medium.com/@mulgundmath/secure-software-updates-via-tuf-part-1-f9bbb34bcbbc)
72+
73+
---
74+
75+
> ## How TUF can secure software systems from update vulnerabilities
76+
>
77+
> *Published on: August 1, 2020*
78+
>
79+
> Over the past couple years, The Update Framework (TUF) has grown into a de facto standard to secure software system updates for many kinds of applications.
80+
>
81+
> [![ Read more ](https://img.shields.io/badge/Read_more-blue?style=for-the-badge&logoWidth=40)](https://www.theserverside.com/blog/Coffee-Talk-Java-News-Stories-and-Opinions/How-TUF-can-secure-software-systems-from-update-vulnerabilities)
82+
83+
---
84+
85+
> ## CNCF Graduates TUF Project to Secure Software Updates
86+
>
87+
> *Published on: December 18, 2019*
88+
>
89+
> The Update Framework (TUF) is made up of a set of libraries, file formats and utilities that can authenticate files and images before they are downloaded from a software repository.
90+
>
91+
> [![ Read more ](https://img.shields.io/badge/Read_more-blue?style=for-the-badge&logoWidth=40)](https://devops.com/cncf-graduates-tuf-project-to-secure-software-updates/)
92+
93+
---
94+
95+
> ## Fuchsia Friday: Amber keeps Fuchsia up to date and secure
96+
>
97+
> *Published on: March 9, 2018*
98+
>
99+
> Newest additions to Fuchsia is The Update Framework “with the ambition of updating all components running on a Fuchsia system” including basic things like apps all the way down to the Zircon kernel and the bootloader.
100+
>
101+
> [![ Read more ](https://img.shields.io/badge/Read_more-blue?style=for-the-badge&logoWidth=40)](https://9to5google.com/2018/03/09/fuchsia-friday-amber-keeps-fuchsia-up-to-date-and-secure/)
102+
103+
---
104+
105+
> ## How The Update Framework Improves Security of Software Updates
106+
>
107+
> *Published on: April 24, 2017*
108+
>
109+
> How can software be updated securely? That’s the challenge that The Update Framework (TUF) aims to solve.
110+
>
111+
> [![ Read more ](https://img.shields.io/badge/Read_more-blue?style=for-the-badge&logoWidth=40)](https://www.eweek.com/security/how-the-update-framework-improves-security-of-software-updates/)
112+
113+
---
114+
115+
> ## Exploring Docker Security – Part 3: Docker Content Trust
116+
>
117+
> *Published on: September 13, 2016*
118+
>
119+
> Obtaining Docker images from private or public Docker Registries is affected by the same issues as every software update system: It must be ensured that a client can always verify the publisher of the content and got latest version of the image.
120+
>
121+
> [![ Read more ](https://img.shields.io/badge/Read_more-blue?style=for-the-badge&logoWidth=40)](https://blog.mi.hdm-stuttgart.de/index.php/2016/09/13/exploring-docker-security-part-3-docker-content-trust/)
122+
123+
---
124+
125+
> ## Securing RubyGems with TUF, Part 3
126+
>
127+
> *Published on: December 10, 2013*
128+
>
129+
> How The Update Framework (TUF) enables developers to securely sign for their code, protecting clients from installing maliciously modified gems.
130+
>
131+
> [![ Read more ](https://img.shields.io/badge/Read_more-blue?style=for-the-badge&logoWidth=40)](https://developer.squareup.com/blog/securing-rubygems-with-tuf-part-3/)
132+
133+
---
134+
135+
> ## Securing RubyGems with TUF, Part 2
136+
>
137+
> *Published on: December 9, 2013*
138+
>
139+
> How The Update Framework (TUF) protects clients from installing maliciously modified gems. In this post, we extend that system to allow developers to update their own gems.
140+
>
141+
> [![ Read more ](https://img.shields.io/badge/Read_more-blue?style=for-the-badge&logoWidth=40)](https://developer.squareup.com/blog/securing-rubygems-with-tuf-part-2/)
142+
143+
---
144+
145+
> ## Securing RubyGems with TUF, Part 1
146+
>
147+
> *Published on: December 6, 2013*
148+
>
149+
> In this series of blog posts, I aim to explain the fundamental concepts of TUF and how they apply to RubyGems.
150+
>
151+
> [![ Read more ](https://img.shields.io/badge/Read_more-blue?style=for-the-badge&logoWidth=40)](https://developer.squareup.com/blog/securing-rubygems-with-tuf-part-1/)

0 commit comments

Comments
 (0)