Into Safe Harbor: Introduction to Container Security
summary
Covers running containers safely in production by using a container registry and preventing untrusted or tampered images and images with known vulnerabilities. Presents Harbor, an open-source, on-premise cloud-native container registry that supports vulnerability scanning and content trust, and introduces the OWASP Container Security Verification Standard with practical guidance for more secure containers and infrastructure.
AI-written summary · about
chapters (13)
- 0:00Welcome
- 0:40What is Container Security?
- 2:03What concrete measures can we take?
- 5:02General Infrastructure
- 8:35Container Security Standard
- 18:38Image Distribution
- 26:28Secrets and Cryptographic Keys
- 27:24Secret Management
- 29:39Certificates
- 30:27Monitoring Resources
- 33:09The Beginner Policy
- 33:36Conclusion
- 34:33Farewell
related talks
34mIntro: Harbor
24mSecuring Container Workloads
42mDeep Dive: Harbor
40mSecuring Containers on the High Seas
35mIntro: Harbor
24mDon’t be a fail whale, secure your containers
55mSecuring Container Supply Chain in CI/CD with Notary Project, ORAS and Harbor
45mAdvancements in Harbor: Security, OCI Spec v1.1, & Performance Enhancement