Following the Golden Image Road: Best Practices and Pitfalls
summary
Describes a Chainguard-based golden image program that standardizes SSL certs, internal package repos and OCI labels, enforces declarative builds and canary/blue‑green rollouts, and replaces 30 duplicate Node images with a single maintained image to cut remediation work. Details include chargeback headaches for tens of thousands of users across ~50 tools, a six‑month daily scan that yields roughly 222 approved vs 11 minimal images, and practical pitfalls like missing CASB certs, abandoned dependencies, and fragile ad‑hoc shortcuts.
AI-written summary · about
chapters (8)
- 0:00Golden image practices
- 6:46Golden image history
- 15:57People, process, technology
- 22:01Pitfalls in enterprise golden images
- 28:07Open source misconceptions
- 34:11Technical challenges in golden images
- 37:27Standardization benefits
- 38:33Summary and next steps
related talks
28mUsing an Image Release Process for Security Wins
28mBuilding Images for the Secure Supply Chain
33mBuilding Images For The Secure Supply Chain
24mCracking the Code of Cloud Security
50mMastering Modern Software Distribution: On-Prem, Air-Gapped, and BYOC Challenges
35mThe State of Your Supply Chain
47mBuilding Trust in Open Source: A Practical Guide to Securing Your ...
37mSupply Chain Security in Kubernetes