Building a Secure By-Design Pipeline with an Open-Source Stack
summary
Shows an end to end secure CI/CD pipeline built with open source tools and demos as code covering IaC, registry, build and cluster stages. Scans images and clusters with Kubescape, Clair and Aqua, enforces failure thresholds in GitHub Actions and Jenkins workflows, and gates builds on CVE counts and misconfigured YAML like missing CPU limits or insecure dev/prod tags. Deploys via Argo CD and Terraform, exports continuous alerts through Prometheus exporters for runtime visibility.
AI-written summary · about
chapters (12)
- 0:00Introduction
- 1:53Speaker background
- 3:00CICD pipeline goals
- 7:22Security pain points
- 9:29Shift left in security
- 11:36Production environment security
- 14:57Container registry scanning
- 15:40CI/CD server security gates
- 17:06Source code security checks
- 19:15Continuous monitoring
- 20:19Implementing security gates
- 22:05Call to action
related talks
32mBuilding a Secure By-Design Pipeline with an Open Source Stack- 32mBuilding a Secure By-Design Pipeline with an Open Source Stack
40mSecure by Default: Building an AI-Augmented, OSS-Powered Reusable CI/CD Pipeline
41mBeyond Guidelines - Designing & Implementing Robust Build Pipelines
38mSecuring your CI/CD Pipeline
37mA Secure Continuous Delivery Pipeline
42mHow To Have Visibility And Security OF A CICD Pipeline
19mHow to utilize Open Source tools to create CI/CD & DevOps workflows