Breaking Bad (Habits) - Continuous Security Throughout Your DevOps Pipeline
summary
Explains a runnable CloudFormation template that launches a Trendmicro trial on EKS and a small pod that continuously scans container registries and build artifacts. Shows a Jenkins plugin calling Smart Check to fail builds on CVEs, then fixes an image by updating Alpine from 8.0 to 8.5 and re-running the pipeline. Demonstrates continuous registry scans, malware and CIS benchmark checks, and a 30‑day activation workflow for hands‑on testing.
AI-written summary · about
chapters (4)
related talks
39mContinuous Security at the Next Level
26mEverything You Should Be Doing, But Aren’t: DevSecOps for K8s Workflows
46mA Security State of Mind: Continuous Security with Kubernetes
37mDevelop and implement a successful DevSecOps approach
23mBuilding a Secure By-Design Pipeline with an Open-Source Stack
32mBuilding a Secure By-Design Pipeline with an Open Source Stack
34mDelivering Continuous Security with Docker
43mSecurity in DevOps Strategies