Awesome-Mirrors/awesome-container-security
1
0
Fork 0
mirror of https://github.com/kai5263499/awesome-container-security.git synced 2024-10-01 05:35:38 -04:00
Code Issues Packages Projects Releases Wiki Activity

more updates, add link to lab and exercizes

Browse Source
This commit is contained in:
Wes Widner 2017-10-17 10:27:30 -04:00
parent 15aeb37b89
commit 22ce69ec03
1 changed files with 15 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
README.md
View File

@ -39,6 +39,7 @@ A collection of container related security resources
* [Docker bench security](https://github.com/diogomonica/docker-bench-security) - One of the first security linting utility for Docker * [Docker bench security](https://github.com/diogomonica/docker-bench-security) - One of the first security linting utility for Docker
### [Buildah](https://github.com/projectatomic/buildah) ### [Buildah](https://github.com/projectatomic/buildah)
* [Introduction](http://www.projectatomic.io/blog/2017/06/introducing-buildah/)
* Docker image building framework * Docker image building framework
### [Packer](https://www.packer.io/docs/builders/docker.html) ### [Packer](https://www.packer.io/docs/builders/docker.html)
@ -50,7 +51,14 @@ A collection of container related security resources
### [Grafeas](https://github.com/Grafeas/Grafeas) ### [Grafeas](https://github.com/Grafeas/Grafeas)
* An open-source API to audit and govern your software supply chain * An open-source API to audit and govern your software supply chain
### Commercial vulnerability scanners ### [Atomic Reactor](https://github.com/projectatomic/atomic-reactor)
* Python library that extends docker build. It's part of the RedHat Atomic project so its rather opinionated
### [Containers Internals Lab](https://github.com/fatherlinux/container-internals-lab)
* A series of exercises that provide a deep dive into the internals of containers. Also has a good SELinux training component
### Commercial solutions
* [Project Atomic](https://www.projectatomic.io/) - RedHat's complete container solution with strong built-in security
* [Black Duck Software](https://www.blackducksoftware.com/) * [Black Duck Software](https://www.blackducksoftware.com/)
* [Docker Cloud](https://cloud.docker.com) * [Docker Cloud](https://cloud.docker.com)
* [Tenable](https://www.tenable.com/products/tenable-io/container-security) * [Tenable](https://www.tenable.com/products/tenable-io/container-security)
@ -99,6 +107,10 @@ A collection of container related security resources
### [bane](https://github.com/jessfraz/bane) ### [bane](https://github.com/jessfraz/bane)
* AppAromor profile generator for Docker containers * AppAromor profile generator for Docker containers
### [Container security as explained by the three pigs](https://www.youtube.com/watch?v=giFKMsIH4b0)
*
* [The Container Coloring Book](https://github.com/fedoradesign/coloringbook-containers/blob/master/Print-Ready/Web.pdf)
### [SELinux for Mere Mortals](https://www.youtube.com/watch?v=cNoVgDqqJmM) ### [SELinux for Mere Mortals](https://www.youtube.com/watch?v=cNoVgDqqJmM)
* A gentle introduction to Security Enhanced Linux * A gentle introduction to Security Enhanced Linux
@ -136,7 +148,7 @@ A collection of container related security resources
## Presentations ## Presentations
------------------------------------------------------------------------------------------ ------------------------------------------------------------------------------------------
### [Container security as explained by the three pigs](https://www.youtube.com/watch?v=giFKMsIH4b0)
### [Introduction to Container Security](https://www.youtube.com/watch?v=ABFmXCGJlo8) ### [Introduction to Container Security](https://www.youtube.com/watch?v=ABFmXCGJlo8)
### [GoDaddy's Production Kubernetes Story & Moving Target Defense in Container Envs](https://www.youtube.com/watch?v=2nisq0stz-s) ### [GoDaddy's Production Kubernetes Story & Moving Target Defense in Container Envs](https://www.youtube.com/watch?v=2nisq0stz-s)
### [Container Security Round Table](https://www.youtube.com/watch?v=eY0wIj7lsEw) ### [Container Security Round Table](https://www.youtube.com/watch?v=eY0wIj7lsEw)
@ -152,4 +164,4 @@ A collection of container related security resources
* [Evolution of Container Usage at Netflix](https://medium.com/netflix-techblog/the-evolution-of-container-usage-at-netflix-3abfc096781b) - Also provides insight into container monitoring, logging, and security at Netflix. * [Evolution of Container Usage at Netflix](https://medium.com/netflix-techblog/the-evolution-of-container-usage-at-netflix-3abfc096781b) - Also provides insight into container monitoring, logging, and security at Netflix.
### [Docker Networking in Production at Visa](https://www.youtube.com/watch?v=k3SeQPt0f0o) ### [Docker Networking in Production at Visa](https://www.youtube.com/watch?v=k3SeQPt0f0o)
* Chief Systems Architect Sasi Kannappan describes how Docker is used at Visa * Chief Systems Architect Sasi Kannappan describes how Docker is used at Visa
## [The Golden Ticket- Docker and High Security Microservices - Black Belt Track](https://www.youtube.com/watch?v=346WmxQ5xtk) ### [The Golden Ticket- Docker and High Security Microservices - Black Belt Track](https://www.youtube.com/watch?v=346WmxQ5xtk)