Ko | make your Kubernetes Deployment with Ko
ko is a simple, fast container image builder for Go applications. It doesn't require docker to build images and is a powerful tool for Kubernetes applications.
It's most useful for images that contain a single Go application without many dependencies on the OS base image.
Ko produces SPDX SBOMs by default and can also create CycloneDX SBOMs. Cosign is used to pull the SBOMs from the Registry.
Chapters
0:00 Intro
0:36 Installation
1:15 Setup
1:54 Building An Image
2:13 Building And Running Through Docker
2:38 Using Ko For Kubernetes
4:00 Cosign
4:21 Cosign Installation
4:31 Downloading Ko's Created SBOM
4:48 SBOM in CycloneDX Format
5:17 Conclusion
5:45 Thank's For Watching!
Resources
🎯 GitHub: https://github.com/ko-build/ko
🎯 Cosign GitHub: https://github.com/sigstore/cosign
🎯 Learn More About SPDX: https://spdx.dev/
🎯 Learn More About CycloneDX: https://cyclonedx.org/
More Great SBOM Resources!
🌐 https://learnsbom.com
► Music Credit
"Artificial.Music - Nighttime Stroll" Attribution 3.0 Unported (CC BY 3.0)
Music provided by BreakingCopyright: • [No Copyright Music] Artificial.Music - Ni...
Contact Us!
📨 [email protected]
#sbom