My App Is Getting a Health Checkup
summary
A team at La Poste built a read-only scanner for applications deployed on a private OpenShift cloud to measure technical debt and plan decommissions or updates. The tool collects versions and obsolescence of runtimes and frameworks (Java, Spring Boot, PHP, Angular), Docker image and library versions (including vulnerability checks like Log4j), PHP/Apache configurations, Actuator settings, certificate expirations, and dependency vulnerabilities, and it uses Docker and the ELK stack to present an at-a-glance health view used by security, SRE, quality and sustainability teams.
AI-written summary · about
chapters (6)
- 0:00Introduction
- 2:16Technical debt issues
- 8:41Building the measurement tool
- 15:05Results demo
- 17:11AI integration for analysis
- 20:21Conclusion & Q&A
related talks
44mDocker for DevSecOps
40mSecuring your dependencies
27mHealth Check-ups on OSS Software Projects: Managing Risks While Promoting (Re)use
09mAutomated Application Security Testing
52mApplication Security at DevOps Speed and portfolio scale
33mPractical Dynamic Application Security Testing within an Enterprise
39mAutomating Your Security Checks: Stop Hiding Your Flaws Next to the Monsters...
37mA question of trust: When good containers go bad