From Vulnerabilities to Vigilance
summary
JFrog shows a specific end-to-end claim: Advanced Security plus curation plus a newly GA product, JFrog Runtime Security, links pipelines to production so teams can detect exposed secrets (example: a Pypi token found in a pushed .pyc), verify image integrity, and roll back bad versions live. The demo installs runtime sensors and cluster controllers, highlights a 56% scanning gap, cites saving ~80% of triage work, and proves remediation actions execute in real time with bidirectional lineage.
AI-written summary · about
chapters (11)
- 0:00Introduction and journey
- 1:16Secrets exposure example
- 5:53JFrog Advanced Security
- 8:44JFrog Curation explained
- 10:32Runtime Security announcement
- 13:21Runtime Security demo setup
- 17:13Live demo first use case
- 21:06Live demo vulnerability fix
- 23:37Live demo integrity violation
- 25:24Live demo new CVE detection
- 27:07Conclusion and next steps
related talks
18mGlobal security at maximum velocity: Multi-Region and hybrid DevSecOps
20mReimagining Trust in Software Releases: A New Approach to Supply Chain Integrity (Part 1)
23mFrog-Proof Security: Streamlining The Sec In DevSecOps
32mHow to implement a DevSecOps pipeline with zero-trust
11mIdentifying Security Vulnerabilities at Scale: Venture Inside a Pipeline
32mFrom Code to Trusted Release
21mMake threats visible in your cloud environment — Eric Jung
01h 13mAddressing the Software Explosion