Rethinking Compliance in a Containerised World
summary
Containers shift audit scope from production to the whole pipeline, increasing surface area and making configuration, vulnerability and data‑protection problems worse. A 2021 study shows 96% of images contain vulnerabilities. Effective fixes are concrete: mandate provenance and SBOMs, use a declarative inventory and a centralized registry, run an automated build for an immutable audit trail, and adopt release channels; Canonical reports using u rockcraft and alignment with Iron Bank to operationalize these controls.
AI-written summary · about
chapters (4)
- 0:00Start
- 3:15What is compliance?
- 11:29Vulnerability management
- 14:20Use the build process to guarantee assurance
related talks
32mA Security State Of Mind: Compliance and ...
48mContainer Security: It’s All About the Supply Chain
37mA question of trust: When good containers go bad
27mContainer Security Best Practices
47mContainer Security, Are You Doing It Wrong?
38mA Security State of Mind: Compliance and Vulnerability Audits for Containers
29mWatching the Watchers: The Hidden Risks of Container Scanning Tools
35mThe State of Your Supply Chain