Minimum Viable Security for Cloud Native Stacks
summary
A tiny FastAPI movie service with SQLite and a Docker image gets a GitHub Actions pipeline that runs concrete controls: static analysis, secret scanning, dependency CVE checks, IaC linting, API pentest, container scanning and an MFA audit. The demo wires Bandit, gitlix and OWASP dependency-check into CI, runs KICS for Terraform and OWASP ZAP against the OpenAPI endpoints, and builds an image scanned by Trivy (container CVEs) plus a custom GitHub MFA check, producing failing artifacts and PR annotations to review.
AI-written summary · about
chapters (5)
- 0:00Start
- 9:27Minimum Viable Security
- 13:11Vulnerable Dependencies
- 18:04Secure Security Yaml
- 20:30Sca Dependency Check
related talks
33mMinimum Viable Security
20mMinimum Viable Security for Python Applications
40mSecure by Default: Building an AI-Augmented, OSS-Powered Reusable CI/CD Pipeline
20m5 Open Source Cloud Native Security Tools
32mBuilding a Secure By-Design Pipeline with an Open Source Stack
35mFrom Builds & CI to Security Testing in a Single PR
30mAdventures in Production with GitOps, Secure Pipelines & Compliance
23mBuilding a Secure By-Design Pipeline with an Open-Source Stack