Episode 31 - Container Security with Josh Duffney

Microsoft Community Insights Podcast

Content provided by Nicholas Chang. All podcast content including episodes, graphics, and podcast descriptions are uploaded and provided directly by Nicholas Chang or their podcast platform partner. If you believe someone is using your copyrighted work without your permission, you can follow the process outlined here https://ppacc.player.fm/legal.

30d ago 33:37

MP3•Episode home

Send us a text

Josh walks us through the powerful combination of open-source CNCF projects that address different aspects of container supply chain security. Learn how Trivy scans for vulnerabilities, Copasetic performs targeted patching when base image updates aren't possible, Notation provides digital signatures to verify trust, and Ratify enforces security policies at deployment time. Together, these tools create a comprehensive approach to securing containers from build to runtime.
Ready to strengthen your container security posture? Listen now and discover how these tools can integrate into your existing workflows. Remember to follow us on social media to stay updated with more insights from community experts and share your thoughts on this episode!

Chapters

1. Introduction to Container Security (00:00:00)

2. Josh's Journey into Cloud Native (00:05:44)

3. Container Security Fundamentals (00:10:06)

4. Image Patching Strategies (00:16:02)

5. Continuous Patching Workflows (00:21:34)

6. Implementation Challenges and Future Trends (00:27:53)

7. Closing Thoughts and Book Recommendations (00:31:40)

33 episodes

#Tech #Nicholas Chang