Discovering and Fixing Dependency Vulnerabilities for Kubernetes apps with Snyk and Codefresh
0 likes569 views
The document discusses the importance of discovering and fixing dependency vulnerabilities in Kubernetes applications using Snyk and Codefresh tools. It highlights the risks associated with open source software, noting a significant increase in vulnerabilities, and emphasizes the need for integrated security practices throughout the development pipeline. The document also provides resources and links for further exploration of automated scanning techniques to enhance application security.
Discovering and Fixing Dependency Vulnerabilities for Kubernetes apps with Snyk and Codefresh
- 1. Discovering and Fixing Dependency Vulnerabilities for Kubernetes apps with Snyk and Codefresh Antoine Arlaud, Snyk & Dan Garfield, Codefresh
- 3. Antoine Arlaud Figure Stuff Out Engineer
- 4. Open Source Is just awesome
- 5. A Small Portion of Your App is Your Code SOFTWARE STACK Custom Code “Your” application Libraries Open source code Base Image Basic OS with associated software packages
- 6. SOFTWARE STACK Custom Code “Your” application Libraries Open source code Base Image Basic OS with associated software packages +53% Vulnerabilitie s Found in OSS YoY Source: https://www.prnewswire.com/news-releases/open-source-vulnerabilities-soar-a n-additional-40-percent-in-2017-300556046.html
- 7. SOFTWARE STACK Custom Code “Your” application Libraries Open source code Base Image Basic OS with associated software packages
- 8. Pipelines and Automation Ships your code seamlessly
- 9. Containers New deliverables for dev teams
- 11. Let’s bake this in Both App sec and OS Sec
- 12. Try it: https://github.com/snyk-playground/codefresh-pipeline-snyk -app-docker-scan OUR APP PIPELINE Commit Dependency Scan Docker Build Image Scan App Build Push to Dockerhub
- 13. Codefresh Plugins Code Scan Scan for vulnerabilities packages in Go, NPM, Java, and many more. Docker Scan Finds vulnerabilities in RPM, Debian, and Alpine Package Managers Try it: https://github.com/snyk-playground/codefresh-pipeline-snyk -app-docker-scan
- 14. T Get 120 FREE builds/month Codefresh.io Learn more at snyk.io