How do you secure your SDLC
summary
Practical steps for securing the SDLC with containers: enable Docker Content Trust and set resource limits to reduce attack surface and prevent privilege escalation, note that a survey finds 76% of containers run as root, and prioritize fixes by checking whether CVEs are actually present in your binaries. The workflow uses Artifactory for storage and JFrog Advanced Security to perform applicability scanning that identifies specific vulnerable files and paths so teams fix one concrete issue instead of chasing noisy reports.
AI-written summary · about
chapters (9)
- 0:00Introduction and welcome
- 1:47Meet the speakers
- 3:32Interactive quiz start
- 7:28Docker container security best practices
- 12:34Docker Compose in SDLC
- 17:35Containers running as root risks
- 22:17Handling vulnerabilities effectively
- 26:24SDLC security overview
- 30:39Q&A session
related talks
34mHow to Contain Security in your Containers
05mContainer Security Best Practices
21mWhat is the Best Container Security Workflow for Your Organization?
30mMaster the Container Security Model with
24mDon’t be a fail whale, secure your containers
32mA Security State Of Mind: Compliance and ...
40mSecuring Containers on the High Seas
35mThe 10 steps of Container Security: It's not that hard !