GitOps - The Magic Key to Cloud Native Security
Talkat ArgoCon Europe 2023 · on Tuesday, 2023-04-18· at 11:25· Elicium Building | Elicium Ballroom 1 [Argo CD]·
summary
Claim: defining resources in Git raises observable surface so scanners hit more of the stack. Demo uses Argo CD for declarative deploys and Trivy (CLI + Trivy operator) for vulnerability, misconfiguration and secret scans, with JSON Schema policies applied to ArgoCD Application CRDs to catch bad CRD shapes before merge. Demo shows pipeline gating via pipelines (Codefresh demo), operator continuous scans inside cluster, and notes Trivy CLI limits at enterprise scale.
AI-written summary · about
chapters (7)
- 0:00GitOps and cloud native security
- 3:32GitOps improves security
- 7:28Software supply chain scanning
- 10:19Scanning manifests with Trivy
- 14:28Trivy scans in pipelines
- 16:40GitOps benefits for security
- 18:51Q&A
related talks
27mSecure by Design: Embedding DevSecOps into Your GitOps Workflows
33mGitOps in Modern Security-Compliant Environments
16mSecure Your GitOps - How to Implement a Robust Security Strategy
21mContinuous Delivery: The Missing Piece in the GitOps-OCI Security Puzzle
34mSecure by Default with GitOps - A Guide to OPA with Argo CD
25mPolicy-Based GitOps: How Policies Can Help Secure and Automate GitOps...
09mSecuring GitOps
17mShift-Left Security in Practice with Gitlab