Knative Security Pipelines
summary
Builds a Kubernetes-native security pipeline called Drakon that actually runs on Tekton pipelines and uses a protobuf message contract between producers and consumers. Producers wrap tools like Bandit dependency-check and ZAP; an enricher deduplicates and marks false positives into Postgres; consumers push to Elasticsearch + DefectDojo consumers or Slack/JIRA. Templates let teams mix-and-match scans locally or in CI, it reduces noise without blocking releases, the demo runs end-to-end, and open sourcing is planned.
AI-written summary · about
chapters (5)
related talks
32mBuilding a Secure By-Design Pipeline with an Open Source Stack
47mTekton, a new approach to pipelines
32mKnative - The Security Platypus?
35mBuilding Reusable DevSecOps Pipelines on a Secure Kubernetes Platform
29mCloud Native CD Pipelines with Tekton
39mMore /w Less ScreenTime: An Application Security Toolchain- 32mBuilding a Secure By-Design Pipeline with an Open Source Stack
48mTekton: From Source to Production Inside Kubernetes