Building a Secure By-Design Pipeline with an Open Source Stack
summary
Claims a reproducible open source pipeline that enforces security gates at build, registry and runtime and shows a working demo on minikube. Uses IDE plugin checks for YAML/cpu limits, a Kubescape scan inside the cluster that flags missing CPU limits, a GitHub Actions workflow (and Jenkins) that runs Kubescape, registry scans with Trivy/Clair, Argo CD/Terraform for deploy, and a Prometheus exporter + Grafana dashboard for continuous risk metrics. Demo scans complete and produces actionable paths to fix failures.
AI-written summary · about
chapters (4)
related talks
32mBuilding a Secure By-Design Pipeline with an Open Source Stack
23mBuilding a Secure By-Design Pipeline with an Open-Source Stack
41mBeyond Guidelines - Designing & Implementing Robust Build Pipelines
40mSecure by Default: Building an AI-Augmented, OSS-Powered Reusable CI/CD Pipeline
38mTutorial: Building Security into Kubernetes Deployment Pipelines
37mAchieving High Security at Scale with Microservices
35mBuilding Reusable DevSecOps Pipelines on a Secure Kubernetes Platform
10mIt's Time We Start Securing Our CICD Pipelines