~/talk

Container security automation with Ansible

Talkat DevConf.CZ 2021 · 2021-02-18..02-20· [security, devops-and-delivery]
links:none on file
slides:none on file

Automated scanning of Docker images using Ansible playbooks runs actual tools (Docker Bench, Clair, Anchore, Trivy, Aqua) against real images and returns JSON reports listing CVEs and severities; a Clair run on debian:sid and a Trivy run report specific vulnerable packages (e.g., libcrypto 1.0.1, medium) and Anchore runs are scheduled and launched from Anchore via Ansible Tower showing completed analyses. Playbooks and demos are in the published repo and scans succeed end-to-end.

AI-written summary · about

  1. 0:00Introduction
  2. 1:45Container security concepts
  3. 4:42Terminology
  4. 6:37Tools
  5. 10:22Clear
  6. 11:41Clear Scanner
  7. 15:22Demo
  8. 22:57Demo Content
  9. 29:17OS Security
~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.