Skip to content

Add "Ask an OC Expert" youtube live to resources page #539

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
st3penta wants to merge 1 commit into
base: main
Choose a base branch
from
+46 −0
Open

Add "Ask an OC Expert" youtube live to resources page #539

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
23 changes: 23 additions & 0 deletions website/content/posts/youtube-ask-an-oc-expert.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,23 @@
---
title: "Ask an OpenShift Expert: Red Hat Trusted Artifact Signer - Conforma"
date: 2026-04-10T10:00:00+01:00
author: "Stefano Pentassuglia"
---

We were the guests of Episode 169 of the Red Hat YouTube podcast "Ask an OpenShift Expert", where we dove into Conforma and how it bridges the gap between artifact generation and production deployment in a secure software supply chain.

<!--more-->

## From Build to Deploy

This episode is a follow-up to [Episode 166](https://www.youtube.com/watch?v=IWUSABfc6tM), where Conforma Product Manager Veda Shankar introduced Red Hat Trusted Artifact Signer (RHTAS) and the build phase of the secure supply chain. This time around, the focus shifted to the **deploy phase**: once your images have signatures and attestations, how do you validate them before they reach production?

The episode features hands-on demos of Conforma's policy-as-code approach, SBOM validation, and using AI to generate policy environments from natural language, making it easier than ever to get started with supply chain policy enforcement.

## Watch the Episode

The full recording is now available on our Resources page.

**[Watch "Ask an OpenShift Expert | Ep 169 | Red Hat Trusted Artifact Signer - Conforma"](/resources/#ask-an-oc-expert-ep-169--red-hat-trusted-artifact-signer-rhtas---conforma)**
Copy link
Copy Markdown

@coderabbitai coderabbitai bot Apr 10, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟡 Minor

Fix the resources anchor to avoid a broken jump link.

Line 21 uses #ask-an-oc-expert-..., but the target heading is “Ask an OpenShift Expert…”, so this fragment is likely incorrect and may not navigate to the intended section.

Suggested fix 
-**[Watch "Ask an OpenShift Expert | Ep 169 | Red Hat Trusted Artifact Signer - Conforma"](/resources/#ask-an-oc-expert-ep-169--red-hat-trusted-artifact-signer-rhtas---conforma)**
+**[Watch "Ask an OpenShift Expert | Ep 169 | Red Hat Trusted Artifact Signer - Conforma"](/resources/#ask-an-openshift-expert-ep-169--red-hat-trusted-artifact-signer-rhtas---conforma)**
📝 Committable suggestion

‼️ IMPORTANT
Carefully review the code before committing. Ensure that it accurately replaces the highlighted code, contains no missing lines, and has no issues with indentation. Thoroughly test & benchmark the code to ensure it meets the requirements.

Suggested change
**[Watch "Ask an OpenShift Expert | Ep 169 | Red Hat Trusted Artifact Signer - Conforma"](/resources/#ask-an-oc-expert-ep-169--red-hat-trusted-artifact-signer-rhtas---conforma)**
**[Watch "Ask an OpenShift Expert | Ep 169 | Red Hat Trusted Artifact Signer - Conforma"](/resources/#ask-an-openshift-expert-ep-169--red-hat-trusted-artifact-signer-rhtas---conforma)**
🤖 Prompt for AI Agents 
Verify each finding against the current code and only fix it if needed.

In `@website/content/posts/youtube-ask-an-oc-expert.md` at line 21, The link
fragment in the markdown entry uses a wrong anchor
(`#ask-an-oc-expert-ep-169--red-hat-trusted-artifact-signer-rhtas---conforma`)
that doesn't match the actual heading text “Ask an OpenShift Expert…”; update
the link target in the string "**[Watch \"Ask an OpenShift Expert | Ep 169 | Red
Hat Trusted Artifact Signer -
Conforma\"](/resources/#ask-an-oc-expert-ep-169--red-hat-trusted-artifact-signer-rhtas---conforma)**"
to use the correct fragment that matches the heading (e.g., replace
"ask-an-oc-expert" with "ask-an-openshift-expert") so the anchor navigates to
the intended /resources heading.


While you're there, explore our collection of other conference presentations, demos, and educational content about securing software supply chains with Conforma!
23 changes: 23 additions & 0 deletions website/content/resources/_index.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -6,6 +6,29 @@ Whether you're just getting started with supply chain security or looking to dee

These conference presentations, demos, educational videos and articles showcase how organizations are using Conforma to secure their software supply chains.

## Ask an OpenShift Expert Ep 169 | Red Hat Trusted Artifact Signer (RHTAS) - Conforma

**Speakers:** Veda Shankar, Stefano Pentassuglia & Joe Stuart, Red Hat
**Event:** Ask an OpenShift Expert, Episode 169
**Format:** YouTube Live
**Link:** [Watch on YouTube](https://www.youtube.com/watch?v=c92FKFC3KEg)

{{< rawhtml >}}
<br>
<iframe width="560" height="315" src="https://www.youtube.com/embed/c92FKFC3KEg" title="YouTube video player" frameborder="0" allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share" referrerpolicy="strict-origin-when-cross-origin" allowfullscreen></iframe>
<br>
{{< /rawhtml >}}

A follow-up to [Episode 166](https://www.youtube.com/watch?v=IWUSABfc6tM) on Red Hat Trusted Artifact Signer, this episode focuses on the deploy phase of the secure software supply chain. After images are signed and attested during the build phase, Conforma validates them against organizational policies before they reach production. This episode covers:

- How Conforma bridges artifact generation and production deployment with policy-as-code
- Conforma's origins in [Konflux](https://konflux-ci.dev/), Red Hat's internal cloud-native software factory
- Hands-on demo: writing Rego policy rules, configuring policy evaluation, and validating SBOMs
- Using AI to generate complete Conforma policy environments from natural language requirements
- How customers can use Conforma in their own pipelines to validate Red Hat or third-party artifacts

*Ideal for administrators and developers looking to add policy-driven gating to their deployment pipelines.*

## From Passive Data to Active Defense: Supply Chain Policy-as-Code with Conforma

**Speaker:** Stefano Pentassuglia, Red Hat
Expand Down
Loading