Why Should Developers Care About Container Security? - Mirantis Labs Tech Talks

This talk explains why developers should care about container security and demonstrates how insecure container configurations and vulnerable base images can create risks. It covers proactive scanning, defense-in-depth practices, and tooling for securing containerized development and deployment.

Syllabus

- Introduction & agenda
- DevOps vs DevSecOps: DevOps
- DevOps vs DevSecOps: DevSecOps
- Live Demo: security implications when running containers
- Live Q&A: has the recent Spring vulnerability been resolved?
- The DevOps feedback loop
- Defense in depth: best practices & tooling to consider
- Review: key takeaways from today's talk
- Helpful resources discussed today
- A quick look ahead to next week's Tech Talk
- Live Q&A: is there a solution to scan Docker containers in Runtime?
- Live Q&A: what tools do you recommend to see if your K8s clusters meet security requirements?
- Outro