Rachid Zarouali is a Cloud-Native/DevOps consultant Microsoft MVP and Docker Captain, speaker and trainer In his previous roles as head of the infrastructure for the French registry and C.I.O of a worldwide recognized CRM and E-COMMERCE agency, he recognized the need to bring the latest technology at a production level to businesses of all sizes. Rachid offers training and consultancy for companies striving to dive into cloud-native. Husband and father, he's participating in OSS communities, https://speakerdeck.com/sevensphereio 2021-10-06 16:18:25 -0400 While learning container security best practices, we stumble very early during the journey on “signing images”, but what the h… is this signing about? Why should you really care? What are the benefits? Advantages, drawbacks, tools to choose, integration, deployment, day2,… ok ok ok I got it loooonnnggg journey ! Throughout this talk, I aim to explain simply with a little fun what this is all about, why it is so important, and more importantly, how it can help you be better at securing your container-based supply chain and production platform. Plain and simple, you’ll learn from this session whoever you are in your organization C level, leads, experts,… did I hooked you? jump in and sail with me safely the seven container seas While learning container security best practices, we stumble very early during the journey on “signing images”, but what the h… is this signing about? Why should you really care? What are the benefits? Advantages, drawbacks, tools to choose, integration, deployment, day2,… ok ok ok I got it loooonnnggg journey ! Throughout this talk, I aim to explain simply with a little fun what this is all about, why it is so important, and more importantly, how it can help you be better at securing your container-based supply chain and production platform. Plain and simple, you’ll learn from this session whoever you are in your organization C level, leads, experts,… did I hooked you? jump in and sail with me safely the seven container seas Fri, 08 Oct 2021 00:00:00 -0400 https://speakerdeck.com/sevensphereio/what-the-h-dot-dot-dot-is-this-signing-thing-about https://speakerdeck.com/sevensphereio/what-the-h-dot-dot-dot-is-this-signing-thing-about "We'll see about security later, we'll put it into production first and then we'll think about it later", how many times have we heard this sentence? Modern CI/CD tools offer more and more functionalities around security, yet this aspect is very often neglected, considered complex, rigid, too expensive, ... Dream or reality? Achievable or utopian? Affordable or expensive? Many questions asked when the ghost of security appears. I have a dream, to show that this ghost is called Casper and he's our best friend. I propose concrete and unadorned feedback of a CI/CD project where security became an ally, not an enemy. How few tools allowed to secure deployments without it being a burden for the dev teams. We'll talk about vulnerability scanning, consistency checking and a few tips and tricks. Dream or reality? Let's find out together :) "We'll see about security later, we'll put it into production first and then we'll think about it later", how many times have we heard this sentence? Modern CI/CD tools offer more and more functionalities around security, yet this aspect is very often neglected, considered complex, rigid, too expensive, ... Dream or reality? Achievable or utopian? Affordable or expensive? Many questions asked when the ghost of security appears. I have a dream, to show that this ghost is called Casper and he's our best friend. I propose concrete and unadorned feedback of a CI/CD project where security became an ally, not an enemy. How few tools allowed to secure deployments without it being a burden for the dev teams. We'll talk about vulnerability scanning, consistency checking and a few tips and tricks. Dream or reality? Let's find out together :) Wed, 06 Oct 2021 00:00:00 -0400 https://speakerdeck.com/sevensphereio/safely-application-deployment-from-dream-to-reality https://speakerdeck.com/sevensphereio/safely-application-deployment-from-dream-to-reality