Unlocking Cloud Build Security with OIDC - Zach Steindler

Speaker: Zach Steindler (@steiza)

Zach is a staff security engineer at GitHub, where he works on cloud security and container security internally, as well as open source security externally. He enjoys time away from the computer biking and homesteading.

Slides: https://www.coffeehousecoders.org/blog/cloud_build_security.html

Abstract: Isolated, ephemeral builders are table stakes for a secure build system, which is why people are turning to cloud CI/CD solutions like Tekton, GCP Cloud Build, or GitHub Actions. Moving your build to the cloud isn't all roses …

build cloud security zach