Continuous Security Testing with OWASP secureCodeBox in Kubernetes
summary
Open-source Kubernetes operator that schedules containerized scans (installed via Helm) and runs Scan custom resource objects which spawn scanner jobs (ZAP, Nuclei, Trivy, Nmap and 20+ scanners). Raw reports parse into a single normalized finding model with name, location and severity; parsers run as pods and upload results to S3. Hooks send findings to DefectDojo or Dependency‑Track, schedules repeat scans (demo nmap run yields four findings), supports cascading scans and an AutoDiscovery mode for images and HTTP services.
AI-written summary · about
chapters (7)
- 0:00Introduction and background
- 3:12What is OWASP secureCodeBox
- 12:47Live demo of scanning process
- 17:24Scheduled and automated scans
- 18:06Cascading scans for infrastructure
- 21:19Autodiscovery in Kubernetes
- 29:05Q&A session
related talks
50mScaling Security Assessment at the Speed of DevOps
38mOpen Source Security Tools for Kubernetes Applications
38mA Security State of Mind: Compliance and Vulnerability Audits for Containers
23mKubernetes-native Security with Starboard
30mA secure journey on Kubernetes
32mBuilding a Secure By-Design Pipeline with an Open Source Stack
47mRollercoaster of Security Automation
27mSurviving Day2 : Picking the Right Tool To Secure Your Kubernetes Habitat