GitHub: DevSecOps: Part 6/12: How to use Container Scanning

How to do Container Scanning 📦 in GitHub? Part 6/12: In this video, Padi and I will show you how to find vulnerabilities in your container images with GitHub. ▬▬▬▬▬▬ T I M E S T A M P S ⏰ ▬▬▬▬▬▬ 00:00 Welcome 00:22 Intro 00:27 DevSecOps with GitHub 01:26 About Container Image Scanning 02:25 Container Image Scanning implementation details 03:07 Add Container Image Scanning to Main-Pipeline.yml 04:50 Add docker.yml 07:49 Add container-image-scan.yaml 10:20 Pipeline results 10:58 Container Image Scanning results 11:49 How to deal with duplicates findings 14:04 Summary ▬▬▬▬▬▬ L I N K S 🔗▬▬▬▬▬▬ Source Code https://github.com/romanoroth/GitHubDevSecOps Blog-Post https://www.romanoroth.com/post/gitlab-vs-github-devsecops GitHub https://github.com/ Patrick Steger https://www.linkedin.com/in/patrick-steger-ch/ Container Scanning in GitLab https://learn.microsoft.com/en-us/azure/container-registry/github-action-scan ▬▬▬▬▬▬ Want to learn more? 🚀 ▬▬▬▬▬▬ GitHub: DevSecOps: Part 1/12: What is GitHub? The fundamental concepts of a DevSecOps pipeline. https://youtu.be/_m5KYEi1ThA GitHub: DevSecOps: Part 2/12: Introduction to GitHub https://youtu.be/6ZdxXDu8ZDA GitHub: DevSecOps: Part 3/12: Learn How to Use SCA (Software Composition Analysis) https://youtu.be/xM3elerxjYo GitHub: DevSecOps: Part 4/12: How to ensure License Compliance? https://youtu.be/l7IBh2xkDcQ GitHub: DevSecOps: Part 5/12: Protect your Apps with Static Application Security Testing (SAST) https://youtu.be/p4xS2X5KsNk GitHub: DevSecOps: Part 6/12: How to use Container Scanning https://youtu.be/_ZeKh3GcbgU ▬▬▬▬▬▬ S U B S C R I B E 🔔 ▬▬▬▬▬▬ ╔═╦╗╔╦╗╔═╦═╦╦╦╦╗╔═╗ ║╚╣║║║╚╣╚╣╔╣╔╣║╚╣═╣ ╠╗║╚╝║║╠╗║╚╣║║║║║═╣ ╚═╩══╩═╩═╩═╩╝╚╩═╩═╝ https://www.youtube.com/channel/UCXvlc9x4zlv5DEqbby55Ivg?sub_confirmation=1 ▬▬▬▬▬▬ Connect with me 👋 ▬▬▬▬▬▬ LINKEDIN ► https://www.linkedin.com/in/romanoroth/ TWITTER ► https://twitter.com/RomanoRoth INSTAGRAM ► https://www.instagram.com/romanoroth/ FACEBOOK ►https://www.facebook.com/romanoroth/ MEETUP ► https://www.meetup.com/de-DE/DevOps-Meetup-Zurich/ CONFERNCE ►https://www.devopsdays.ch/ HOMEPAGE ► https://www.romanoroth.com/ ▬▬▬▬▬▬ P L A Y L I S T S ▶️ ▬▬▬▬▬▬ Modern Software Engineering https://www.youtube.com/playlist?list=PLrsbMazVPK_rb56rZQr2fyBGR3cyanZpX DevOps https://www.youtube.com/playlist?list=PLrsbMazVPK_ro3fn1G-3Ui2mBPHxOD9kF GitLab: Build a DevSecOps Pipeline https://www.youtube.com/playlist?list=PLrsbMazVPK_qhf3ahA_zRPlwBaGGhSu2P #devsecops #devops #github #romanoroth