Getting Started With Cloud Native Security
Comprehensive tutorial on Kubernetes security basics, covering threat modeling, attack vectors, and practical techniques for securing deployments using open-source tools and best practices.
Harbor - Enterprise Cloud Native Artifact Registry
Explore Harbor, an open-source cloud native registry for secure management of container images and Helm Charts. Learn about RBAC, replication, scanning, and more with real-world use cases and demos.
Kubernetes-native Security with Starboard
Explore Starboard, an open-source tool integrating security information into Kubernetes CRDs. Learn its motivations, design challenges, and how to generate actionable security insights.
Harbor - Enterprise Cloud Native Artifact Registry
Explore Harbor's enterprise cloud native registry features, including RBAC, content replication, vulnerability scanning, and future roadmap for enhanced container management and distribution.
Intro - Harbor
Explore Harbor, an open-source cloud-native registry for secure container image management. Learn about RBAC, vulnerability scanning, image distribution, replication, and provenance through real-world use cases.
Integrating Security in the Build Pipeline
Discover how to integrate security into your build pipeline, addressing vulnerabilities early and making deployment decisions based on artifact security status.
My Container Image has 500 Vulnerabilities, Now What?
Explore container image vulnerabilities, their origins, and effective strategies for prioritization and remediation in this insightful talk on securing Kubernetes environments.
Building Secure Open Source Communities From the Ground Up
Learn strategies for implementing security best practices, managing dependencies, and balancing developer experience in open source communities, using tools like Renovate, Trivy, and Dependabot.
Project Copacetic - Directly Patch Container Image Vulnerabilities
Discover how to efficiently patch container image vulnerabilities with Project Copacetic, streamlining security updates through automated scanning, direct patching, and seamless pipeline integration.
Automated Vulnerability Patching with Copa
Discover how Copa automates container vulnerability patching, enabling swift OS-level remediation without upstream rebuilds while streamlining security workflows for DevSecOps teams.
API Security Fundamentals - Understanding Modern API Threats and Protection
Dive into API security challenges and solutions with Filip Verloy, exploring why APIs are becoming prime attack vectors and how traditional security measures fall short in protecting modern applications.
A Day in the Life of a Base Image - Evolution of Vulnerabilities in Popular Containers
Explore container security evolution through data-driven analysis of popular DevOps images, vulnerability scanning challenges, and practical solutions for maintaining secure development workflows.
Snyk Free DevSecOps Tools and Resources
Explore Snyk's free DevSecOps tools for identifying and addressing vulnerabilities in your code, regardless of programming language. Learn to enhance application security with powerful resources.
Creating Zero-CVE Base Images for Dockerfiles
Create CVE-free base images for Dockerfiles using BuildSafe. Search and add required packages easily. Simplify the process of building secure artifacts with zero vulnerabilities.
Using AI Tools for Secure Coding: ChatGPT and Perplexity.ai - Part 4
Explore AI-assisted coding with ChatGPT and Perplexity.ai, learn to identify and fix vulnerabilities, and discover how Snyk can enhance your code security in this informative video.
Overcoming CVE Shock - Adding Perspective in Vulnerability Scanning
Explore vulnerability scanning in Kubernetes, covering auditing, security mechanisms, and CI/CD integration. Learn to overcome challenges and implement effective security measures.
Embrace Security in Your Supply Chain
Comprehensive guide to integrating security throughout the software supply chain, focusing on DevOps-friendly tools and practices to mitigate risks without hindering development.
Security Tooling in Your DevOps Pipeline
Explore strategies for integrating security tools and automation into CI/CD pipelines, including vulnerability scanning, static analysis, and dynamic testing to enhance DevOps agility.
С Какого Конца Начинать Безопасную Разработку - Инструменты и Подходы
Узнайте эффективные подходы к внедрению безопасной разработки, включая анализ инструментов сканирования уязвимостей и практические рекомендации по их интеграции в процесс разработки.
Fortifying Your Codebase with GitHub - DevSecOps 2023
Fortify your codebase using GitHub's security features. Learn about Dependabot, advanced security tools, and best practices for enhancing developer experience and code protection.
Proactively Auditing Open Source Dependencies for Security - Here Is a Clean Section of the Beach
Explore proactive auditing of open source dependencies, scaling challenges, and data handling in the Alpha-Omega project. Learn about efforts to enhance software security through systematic scanning and repair.