Building Secure Containers: A Practical Guide to Vulnerability Scanning and SBOMs

Containers are ubiquitous. Despite being the foundation of contemporary progress, their security is frequently disregarded.

We will use Harbor, an open-source container registry, makes container security and management easier in this talk. We will containerize the apps, check images for vulnerabilities, and implement best practices to create safe, 0 CVE, production-ready containers through a live demo. We will also delve into more complex ideas like supply chain security and SBOMs.

1. It is often overlooked that containers need to be secure.
2. This leads to high CVE images. Which is frequently an issue
3. Attendees of this talk will gain insights on why vulnerability scanning is important.
4. Attendess will find ideas to integrate the security into their workflows.
5. My goal is to make sure that everyone who attends this talk should understand how important that container security is for supply chain safety.