~/talk

What do security teams really want?

on YouTube 20m
Talkat Docker Community All-Hands #6 · on Thursday, 2022-09-01· [security]

speaker

name:Rani Osnat
x:ranio1

resources

video:https://youtu.be/_rspGpxpL0w
slides:none on file

summary

Explains concrete actions security teams actually ask for: generate SBOMs for images and integrate scanning into CI/CD so known CVEs and secrets are detected early; use a small set of curated base images (avoid fresh unknown public images) and prefer minimal OS images; enforce guardrails not gates with prioritized, trackable remediation lists and compensating runtime controls; audit CI/CD, registries and IaC templates regularly and automate everything that must be repeatable.

AI-written summary · about

chapters (11)

  1. 0:00Introduction
  2. 0:53About Aqua
  3. 1:48Agenda
  4. 7:14Security Teams
  5. 10:53What can you do
  6. 13:26Scanning
  7. 14:22Minimal OS
  8. 15:29Supply chain
  9. 17:10Infrastructures
  10. 17:54Collaboration
  11. 19:40Useful links

related talks

~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.