Kick Your Security Up a Notch with Custom Queries
summary
Shows how to stop noisy generic scans by writing and mounting custom Rego policies for Open Policy Agent / Rego so Kicks runs organization‑specific checks. Demonstrates editing the JSON metadata, adding test cases, and overriding bundled rules by mounting custom queries into the Kicks container or baking them into an image. Cites Kicks’ coverage across Terraform, Kubernetes, OpenAPI and other formats and that users uncover findings on first run among 1600+ checks and successfully narrow results to only the relevant failures.
AI-written summary · about
chapters (9)
- 0:00DevOps security challenges
- 2:01DevOps shoulders security
- 6:22Gus leveraged IaC
- 8:31Misconfigurations with Kicks
- 13:07Custom Kicks queries with OPA
- 20:58Mike Arman's API inspection
- 26:55Writing custom Kicks policies
- 29:47DevSecOps noise reduction
- 32:16Q&A
related talks
39mApplying Policy Throughout The Application Lifecycle with Open Policy Agent
30mSecuring the Kubernetes Empire with OpenPolicyAgent and Rego
25mPolicing Your Kubernetes Clusters with Open Policy Agent (OPA) - Mark Puddick & Amith Nambiar
36mOpen Policy Agent: security for cloud natives and everyone else
25mMake Your Security Policy Auditable
32mUsing Open Policy Agent to Meet Evolving Policy Requirements
25mPolicing Your Kubernetes Clusters with Open Policy Agent (OPA)
12mTalk Deep Dive