Projeto final do curso Programa Intensivo em Containers e Kubernetes.
Learning Docker step by step - from basics to practical DevOps use cases
The repository demonstrates the use of Docker Scout in a CI/CD pipeline to examine vulnerabilities in container images. This demo was presented at Secure Open Source Software (SOSS) Community Days India 2024.
A shorthand GitHub Action for building Docker and pushing to ghcr.io and other repositories. An smaller alternative to combining qemu and other steps.
A tool to police docker images cves vulnerabilities through a policy manifest in your CI/CD pipeline
Security scan on Docker images using Grype, Trivy and Docker-Scout (.xlsx)
Bash utility to compare two Docker images using Syft and Grype
DockerCon23 Workshop on Secure Development with Docker
DevOps Engineer Project
MCP server for Docker Scout - container security scanning
Project to learn all docker tools
A web API in Python using Django with a basic front end where users can search the database. The project was done using DevOps tools and methodologies.
A Github Actions pipeline that builds safer containers
Docker Hardened Images Demo
Dockerized-COPA is a containerized solution for patching vulnerable container images using Project Copacetic (COPA). It simplifies the process of updating container images with security patches without requiring a complete rebuild from source.
This is a demo about the integration of Docker Scout with GitHub actions using the CLI.
Hands-on DevSecOps demo: a hardened, multi-stage Docker build for a Flask app with a Trivy CI security gate, SBOM generation (Syft), Docker Scout scanning, digest-pinned base images, and documented CVE exceptions. Build fails on HIGH/CRITICAL vulns.
Add a description, image, and links to the docker-scout topic page so that developers can more easily learn about it.
To associate your repository with the docker-scout topic, visit your repo's landing page and select "manage topics."