Skip to content

Commit 9185cab

Browse files
committed
Add "Ask an OC Expert" youtube live to resources page
Adds blog post and resources entry for the Youtube live "Ask an OpenShift Expert" episode 169, where Conforma has been presented Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> Ref: https://issues.redhat.com/browse/EC-1702
1 parent 27f65a5 commit 9185cab

2 files changed

Lines changed: 46 additions & 0 deletions

File tree

Lines changed: 23 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,23 @@
1+
---
2+
title: "Ask an OpenShift Expert: Red Hat Trusted Artifact Signer - Conforma"
3+
date: 2026-04-10T10:00:00+01:00
4+
author: "Stefano Pentassuglia"
5+
---
6+
7+
We were the guests of Episode 169 of the Red Hat YouTube podcast "Ask an OpenShift Expert", where we dove into Conforma and how it bridges the gap between artifact generation and production deployment in a secure software supply chain.
8+
9+
<!--more-->
10+
11+
## From Build to Deploy
12+
13+
This episode is a follow-up to [Episode 166](https://www.youtube.com/watch?v=IWUSABfc6tM), where Conforma Product Manager Veda Shankar introduced Red Hat Trusted Artifact Signer (RHTAS) and the build phase of the secure supply chain. This time around, the focus shifted to the **deploy phase**: once your images have signatures and attestations, how do you validate them before they reach production?
14+
15+
The episode features hands-on demos of Conforma's policy-as-code approach, SBOM validation, and using AI to generate policy environments from natural language, making it easier than ever to get started with supply chain policy enforcement.
16+
17+
## Watch the Episode
18+
19+
The full recording is now available on our Resources page.
20+
21+
**[Watch "Ask an OpenShift Expert | Ep 169 | Red Hat Trusted Artifact Signer - Conforma"](/resources/#ask-an-openshift-expert-ep-169--red-hat-trusted-artifact-signer--conforma)**
22+
23+
While you're there, explore our collection of other conference presentations, demos, and educational content about securing software supply chains with Conforma!

website/content/resources/_index.md

Lines changed: 23 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -6,6 +6,29 @@ Whether you're just getting started with supply chain security or looking to dee
66

77
These conference presentations, demos, educational videos and articles showcase how organizations are using Conforma to secure their software supply chains.
88

9+
## Ask an OpenShift Expert Ep 169 | Red Hat Trusted Artifact Signer - Conforma
10+
11+
**Speakers:** Veda Shankar, Stefano Pentassuglia & Joe Stuart, Red Hat
12+
**Event:** Ask an OpenShift Expert, Episode 169
13+
**Format:** YouTube Live
14+
**Link:** [Watch on YouTube](https://www.youtube.com/watch?v=c92FKFC3KEg)
15+
16+
{{< rawhtml >}}
17+
<br>
18+
<iframe width="560" height="315" src="https://www.youtube.com/embed/c92FKFC3KEg" title="YouTube video player" frameborder="0" allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share" referrerpolicy="strict-origin-when-cross-origin" allowfullscreen></iframe>
19+
<br>
20+
{{< /rawhtml >}}
21+
22+
A follow-up to [Episode 166](https://www.youtube.com/watch?v=IWUSABfc6tM) on Red Hat Trusted Artifact Signer, this episode focuses on the deploy phase of the secure software supply chain. After images are signed and attested during the build phase, Conforma validates them against organizational policies before they reach production. This episode covers:
23+
24+
- How Conforma bridges artifact generation and production deployment with policy-as-code
25+
- Conforma's origins in [Konflux](https://konflux-ci.dev/), Red Hat's internal cloud-native software factory
26+
- Hands-on demo: writing Rego policy rules, configuring policy evaluation, and validating SBOMs
27+
- Using AI to generate complete Conforma policy environments from natural language requirements
28+
- How customers can use Conforma in their own pipelines to validate Red Hat or third-party artifacts
29+
30+
*Ideal for administrators and developers looking to add policy-driven gating to their deployment pipelines.*
31+
932
## From Passive Data to Active Defense: Supply Chain Policy-as-Code with Conforma
1033

1134
**Speaker:** Stefano Pentassuglia, Red Hat

0 commit comments

Comments
 (0)