Securing Container Workloads
summary
Covers practical steps to find and fix vulnerabilities in container images by scanning registries and CI/CD pipelines. Demonstrates integrating the open-source Trivy scanner with a Harbor registry to secure images and discusses best practices for managing vulnerable base images and their dependencies.
AI-written summary · about
chapters (17)
- 0:00Intro
- 1:05Security in Containers at this moment
- 1:30AWS 2019 Container Security Survey
- 2:20Things we do to achieve security
- 3:03How you can secure containers?
- 4:43How you can secure applications?
- 6:43Measuring CVE'S
- 7:21How to Secure Images?
- 7:40Base Image Variants
- 9:00Commonly used base images
- 9:39Best Practices in writing a Dockerfile
- 10:42OSS tools from CNCF for Security
- 13:36Other OSS tools
- 14:22Integrating Security in Registries
- 14:57Integrating Harbour with Trivy
- 15:38Demo time
- 20:06Securing Images at Runtime
related talks
01h 21mFirst Steps to Full Lifecycle Security with Open Source Tools
30mMaster the Container Security Model with
30mUpgrade Images by Digging Out and Automatically Fixing the Vulnerabilities
21mWhat is the Best Container Security Workflow for Your Organization?
30mUpgrade Images by Digging Out and Automatically Fixing the Vulnerabilities
34mContainer Vulnerability Management in Kubernetes
29mWatching the Watchers: The Hidden Risks of Container Scanning Tools
32mDo Your Containers Even Lift – A Hardening Guide for K8s Containers