Secure Development with Docker | Workshop (DockerCon 2023)

Developers want to move fast to build new features, fix bugs, and provide better user and customer experiences. However, there is a constant struggle between developers, who want to leverage various open source libraries and frameworks and may not be able to keep up with all their updates, and security teams, who want to ensure they are minimizing risk. While containers help provide consistent environments across the entire software development lifecycle, there's thought and process needed to maximize their benefits. In this DockerCon 2023 workshop, you’ll start off by learning about and remediating several common attacks against your software supply chain. From there, we'll dive deeply into the practice of securing the software supply chain, taking a comprehensive view of the problem and possible solutions. With this knowledge, you’ll then learn how Docker Scout helps you understand what’s in your images, how those images are constructed, what's running where, and providing actionable feedback as early in the process as possible so concerns are eliminated before they become problems. Speakers: Yves Brissaud, Sr. Software Engineer, Docker James Carnegie, Computer Programmer, Docker David Dooling, Engineering Manager, Docker Christian Dupuis, Sr Principal Engineer, Docker Resources: - Docker.com http://docker.com/ - Announcing Docker Scout GA: Actionable Insights for the Software Supply Chain https://www.docker.com/blog/announcing-docker-scout-ga/ - Docker Scout: Securing The Complete Software Supply Chain (DockerCon 2023) https://www.youtube.com/watch?v=4iJ7yw-Oe4I - What’s in My Container? Docker Scout CLI and CI to the Rescue (DockerCon 2023) https://www.youtube.com/watch?v=KX0HEszru2c&t=16s Join the conversation! LinkedIn → https://dockr.ly/LinkedIn Twitter → https://dockr.ly/Twitter Facebook → https://dockr.ly/Facebook Instagram → https://dockr.ly/Instagram ABOUT DOCKER: Docker provides a suite of development tools, services, trusted content, and automations, used individually or together, to accelerate the delivery of secure applications. #docker #devops #machinelearning