Tackling security challenges with Airship
summary
Airship demonstrates concrete fixes: container images live on quay.io and clair scan finds 199 CVEs in an Ubuntu 16.04 pegleg image versus 44 in 18.04, proving newer bases matter; use CI gating to reject high/medium counts. Virus scanning uses clambake + clamav to extract image layers and cache results. Secrets use pegleg with symmetric encryption via an environment key and files set to 640 file perms so only root/group can read while others cannot. Continuous vuln disclosure and a documented management process handle fixes.
AI-written summary · about
chapters (4)
related talks
33mBuilding Images For The Secure Supply Chain
24mCracking the Code of Cloud Security
37mIt’s 2018; Are My Containers Secure Yet?!
20mHow Secure is Your Base Image? ...
18mPractical End-to-End Container Security at Scale
29mWatching the Watchers: The Hidden Risks of Container Scanning Tools
36mSecurity Scanning - Past/Present/Future
30mMaster the Container Security Model with