Container Security Made Easy – Tools and Techniques for Developers
summary
A small .NET weather API is built with a multistage Dockerfile, an SBOM is generated and stored, and dependency updates are opened by depender board pull requests with CI checks. Trivy flags 47 image vulnerabilities; a coatic patch layer run reduces that to 36 without rebuilding the app. The pipeline uploads original and patched SBOMs and then attaches a signature via cosign keyless signing, so images and provenance are verifiable.
AI-written summary · about
chapters (6)
- 0:00Introduction
- 1:49DevSecOps basics
- 6:18Demo overview
- 8:07Dependency awareness demo
- 17:22Vulnerability fixing demo
- 25:21Q&A session
related talks
34mHow to Contain Security in your Containers
01h 21mFirst Steps to Full Lifecycle Security with Open Source Tools
46mAdding security for reliable continuous delivery
19mFrom Code to Cloud: Embedding Security
18mPractical End-to-End Container Security at Scale
37mDockerize Securely: SBOMs + Attestations + Bake
24mSecuring Container Workloads
31mContinuous Security – integrating security into your pipelines