8 — Software Supply Chain Security
Purpose
[stub: software-supply-chain-security]
Metadata
| Author | Amit Singh |
| Scope | kubernetes |
Local graph
Linked from 2 notes
CI/CD Platform Engineering
A book-shaped table of contents for CI/CD platform engineering: pipeline foundations, build/artifact/delivery platforms, GitHub Actions end to end (workflow mechanics through enterprise governance), Argo Workflows, Tekton, Jenkins, release engineering, platform security, observability, reliability, enterprise governance, and MAANG interview preparation — cross-linking existing tech/kubernetes/platform-engineering-fundamentals/system-design notes instead of duplicating them.
Kubernetes
A book-shaped table of contents for Kubernetes: cloud-native foundations, the CKAD/CKA/CKS certification tracks, control-plane internals, platform tooling, multi-cluster architecture, and MAANG-level system design and interview prep — cross-linking the existing Prometheus, Observability, and Platform Engineering chapters instead of duplicating them.
Related notes
1 — Image Security
Why minimal or distroless base images shrink the attack surface far more than patching CVEs in a bloated one ever will.
2 — Image Signing
A signature only proves who built the image, not that it's safe — signing and scanning solve different problems and neither substitutes for the other.
7 — Policy Enforcement (OPA Gatekeeper, Kyverno)
Kyverno's native Kubernetes-resource policies trade Rego's expressiveness for a much shorter path from 'write policy' to 'policy enforced'.
4 — SBOM
An SBOM turns 'are we affected by this CVE' from a multi-day manual audit into a single query against a manifest already generated at build time.