Roadmap to 1000s of golden containers secure by default
summary
Describes a pipeline that uses TFE and HCP Packer plus CI/CD integration to auto build and auto patch base images so engineers never touch vulnerable dependencies and customer complaints fall. It scales from 1200 production containers to roughly 30,000 images built per week and yields about 95% fewer vulnerability tickets. Builds complete in minutes instead of months, integrate into existing Jenkins and QA systems, and surface only rare failures for manual rollback or investigation.
AI-written summary · about
chapters (14)
- 0:00Introduction and motivation
- 1:04Shifting security left in pipelines
- 3:06Overcoming resistance to change
- 5:34Valley of despair and validation
- 6:58Measuring transformation impact
- 10:08Improving developer experience
- 11:11Scale of automated container builds
- 12:13Business impact and customer feedback
- 13:15Unexpected benefits and surprises
- 14:38Surprise adverse impacts and challenges
- 16:01Winning hearts and minds with metrics
- 18:48Hindsight lessons and regrets
- 20:32Future roadmap and AI integration
- 22:15Key takeaway for organizations
related talks
16mSimplifying the Journey of Your Containerized Application from Dev to Production
27m50 Ways To Build Containers?
54mFrom Code to Customer
14mKeynote: What We Learned Dissecting the World’s Most Popular Containers
30mDevOps and Agility Immersed in the Production Factory
43mThe future of containerization in mature organizations
34mENABLING CONTINUOUS DEPLOYMENT OF PIXEL-PERFECT USER INTERFACES
19mThink Prod Up Front: Shifting Left on Production Excellence