Building a Secure By-Design Pipeline with an Open Source Stack
summary
End-to-end pipeline assembles open source pieces to catch security early: source and IaC scanning in the IDE and PRs, CI integration with GitHub Actions or Jenkins to run Kubescape and publish results, registry scans with Trivy/Clair/Anchore before deploy, and in-cluster checks plus a Prometheus exporter feeding Grafana for drift. Demo runs on Minikube and finishes a scan in ~2 minutes, surfaces multiple failed controls (missing CPU/memory limits, risky service accounts), and blocks or reports until fixes are applied.
AI-written summary · about
chapters (4)
related talks
32mBuilding a Secure By-Design Pipeline with an Open Source Stack
23mBuilding a Secure By-Design Pipeline with an Open-Source Stack
40mSecure by Default: Building an AI-Augmented, OSS-Powered Reusable CI/CD Pipeline
41mBeyond Guidelines - Designing & Implementing Robust Build Pipelines
43mBuilding a Secure DevOps Pipeline
18mContinuous Security - Building Security into your Pipelines
30mIntelligent Pipelines: Bringing AI/ML into DevSecOps Automation
25mDecoupling DevSecOps from CI/CD Pipelines