I Deleted 78% of my Redis Containers, and they Still Run!
summary
Claim: deleted 78% of Redis packages and the service still runs. The team uses runtime profiling plus simple coverage script payloads to find required binaries and libraries, then a GitHub Actions pipeline produces hardened images on Docker Hub with SBOMs. Results: attack surface drops 102 MB to 21 MB, vulnerabilities drop 110 to 30, critical vulns 7 to 4, packages 112 to 20. An RRS AI score flags likely POC exploits and the process runs automatically on upstream updates.
AI-written summary · about
chapters (10)
- 0:00Introduction
- 0:43What is Community Images
- 3:07Results
- 3:36Solution
- 4:55Coverage Script
- 5:42Sample Coverage Script
- 6:13Demo
- 11:02How to contribute
- 11:22Whats next
- 11:49Outro
related talks
31mI Deleted 78% of my Redis Containers, and they Still Run!
50mContainer Attack Surface Reduction Beyond Name Space Isolation
24mOvercoming CVE Shock - Adding Perspective in Vulnerability Scanning
34mHow to Lose a Container in 10 Minutes
35mSecuring Containers by Breaking In
11mLets secure our Kubernetes cluster
16mUnpacking Open Source Security in Public Repos
37mSecuring Containers by Breaking In