A Security State Of Mind: Compliance and ...
summary
Containers speed CI CD but also multiply attack surface so adopt automated checks and patch pipelines. OpenSCAP is the concrete tool demonstrated to scan offline images and running containers, produce HTML and remediation scripts, and integrate into Jenkins to fail builds or trigger rebuilds. A Red Hat scan finds 64% of Docker Hub images show medium or worse vulnerabilities. Practices shown include image signing, private registries, not running as root, namespaces and automated rolling or blue green patch deployment.
AI-written summary · about
chapters (12)
- 0:00Introduction
- 0:57DevOps
- 2:32Security
- 7:51Containers
- 9:45Container Image Security
- 12:07Container Registry Security
- 17:37OpenSCAP
- 19:26Compliance
- 21:00Known vulnerabilities
- 21:47Docker container compliance
- 23:14Continuous delivery
- 26:41Container security
related talks
38mA Security State of Mind: Compliance and Vulnerability Audits for Containers
46mA Security State of Mind: Continuous Security with Kubernetes
35mThe 10 steps of Container Security: It's not that hard !
21mWhat is the Best Container Security Workflow for Your Organization?
30mMaster the Container Security Model with
37mA question of trust: When good containers go bad
36mSecurity Scanning - Past/Present/Future
18mPractical End-to-End Container Security at Scale