Securing your Codebase, Repo's & Images

Code base & Repos

Problems

Building Siloed, No version control, Untracked changes

Solution

Version control and collaboration, so everyone works on the same source of truth and changes are tracked.

Secure Container Images

Problems 

Using standard container images may invite vulnerabilities

Solution

Using Docker Hardened Images ensures that developer are using updated, secure and compliant container Images maintained by Docker

Firstly...

We look at governance which is how can we control how devs use these publicly available images. DockerHub and Artifactory offer Registry Access Management which lets admins control which registries devs can access, meaning they can only use approved registries.     

Secondly...

Utilising tooling like Docker Hardened Images you can ensure your dev’s are using the most up to date, compliant and secure container images. These golden container images are maintained by Docker and offer 95% less attack surfaces! 

Which of my customers care about securing Codebase, Repo's & Images?

Organisations with over 50 Developers typically:

• Financial services
• Healthcare
• Public sector
• Telecommunications
• Energy
• Retail with PCI requirements

Who cares about securing Codebase, Repo's & Images?

• Platform Engineering Manager
• CISO
• AppSec Lead