Docker for DevSecOps
summary
La Poste created a reusable platform featuring a catalog of minimal Docker base images (reducing some images by ~50%), daily automated jobs to rebuild and retag base images, and continuous scanning that uncovers about 8–9 critical vulnerabilities in legacy apps. The platform’s pipelines run SAST with Sonar, image scanning with Anchore, DAST with ZAP, and buildpacks to produce reproducible images deployed to OpenShift, using tooling and automation to reduce drift and speed patch-and-redeploy cycles.
AI-written summary · about
chapters (11)
- 0:00Introduction
- 4:41Cyber threats and resilience
- 5:22Developer role and Docker
- 11:49Docker Compose for devs
- 15:09Security expert role
- 22:10Static and dynamic scans
- 23:16Secrets and ConfigMaps in Kubernetes
- 27:12Docker image inspection
- 34:00Ops role and Kubernetes
- 36:52Next steps and conclusion
- 37:55Q&A
related talks
34mDelivering Continuous Security with Docker
18mPractical End-to-End Container Security at Scale
46mWhat Security People Want: Making DevSecOps Happen with Containers
32mA Security State Of Mind: Compliance and ...
46mAdding security for reliable continuous delivery
27mDevSecOps Stories
46mA Security State of Mind: Continuous Security with Kubernetes
24mDeveloper Environments in