A Security State of Mind: Compliance and Vulnerability Audits for Containers
summary
Claims that OpenSCAP can automatically find CVEs and configuration failures in container images and running containers, produce remediation scripts, and be hooked into CI/CD to rebuild and redeploy fixed images via Kubernetes/OpenShift. Demo shows registry scanning, image-at-rest and live container scans, and Jenkins pipeline integration, though a live demo on a laptop cluster hits Wi‑Fi problems. Practical takeaways: OpenSCAP scans images at rest and live, integrate into Jenkins CI, use image signing and private registries.
AI-written summary · about
chapters (31)
- 0:00Introduction
- 1:07Industry Perspective
- 4:29Security
- 6:20Security concerns
- 7:10Container life cycle
- 7:27Immutable
- 8:09Docker Image
- 8:47Container Security
- 9:56Container Image Signing
- 10:19Docker Hub Security
- 10:51Private Registry Build
- 11:28Container Build Process
- 12:15Security Responsibilities
- 13:27Security Scanning
- 14:32Post Security
- 16:08Open SCAP
- 18:14Common Configuration Enumeration
- 18:45OpenSCAP
- 19:55Use Cases
- 20:59Checklist
- 21:32Remediation
- 21:59Scan for known vulnerabilities
- 24:56CICD Pipeline
- 25:50CI Pipeline Example
- 26:29SCAP Workbench
- 27:20OpenScape
- 27:47Demo
- 30:10OpenShift
- 30:57Network Connectivity Issues
- 32:48Wrapup
- 38:12Contact
related talks
32mA Security State Of Mind: Compliance and ...
36mSecurity Scanning - Past/Present/Future
37mA question of trust: When good containers go bad
30mMaster the Container Security Model with
29mWatching the Watchers: The Hidden Risks of Container Scanning Tools
24mSecuring Container Workloads
24mA Checklist for Security from the Container to the Kubernetes: An Overview End to End
27mRethinking Compliance in a Containerised World