Building Security In: Using Cloud Foundry to Secure CF Apps
summary
Cloud Foundry gets used to enforce app security by hooking into buildpacks, the droplet API, service brokers and log nozzles. Examples: a buildpack test that fails a push when it finds tokens; a droplet scanner that downloads droplets via the CF API to report vulnerable NPM/Maven gems; an auto-patch that swaps vulnerable JARs (demo fixes a Struts2 vuln that previously allowed remote command execution). Practical tools mentioned: buildpack tests, droplet scanning, Snyk auto-patch.
AI-written summary · about
chapters (10)
- 0:00Introduction
- 1:45Platform vs. App security
- 3:46Security hooks overview
- 5:46Managing application secrets
- 9:52Buildpack security testing
- 15:01Log analysis for security
- 17:07Vulnerable dependencies
- 21:57Dependency testing
- 25:08Automated patching
- 32:15Conclusion and further steps
related talks
31mStranger Danger: Addressing Vulnerable CF Application Dependencies
40mCloud Foundry Through the Eyes of a Hacker
01h 33mA How to Guide to Security in the PAAS Cloud
31mHealthy Agile Product Security
41mPanel: Securing Cloud Native Applications
31mPractical Guide to Frictionless Cloud Native Security for DevOps
32mCloud Foundry for Everyone!
26mThe State of Supply Chain Security in the Cloud Foundry Ecosystem