Projeto final do curso Programa Intensivo em Containers e Kubernetes.
Learning Docker step by step - from basics to practical DevOps use cases
A shorthand GitHub Action for building Docker and pushing to ghcr.io and other repositories. An smaller alternative to combining qemu and other steps.
The repository demonstrates the use of Docker Scout in a CI/CD pipeline to examine vulnerabilities in container images. This demo was presented at Secure Open Source Software (SOSS) Community Days India 2024.
A tool to police docker images cves vulnerabilities through a policy manifest in your CI/CD pipeline
Security scan on Docker images using Grype, Trivy and Docker-Scout (.xlsx)
DockerCon23 Workshop on Secure Development with Docker
Bash utility to compare two Docker images using Syft and Grype
DevOps Engineer Project
MCP server for Docker Scout - container security scanning
A web API in Python using Django with a basic front end where users can search the database. The project was done using DevOps tools and methodologies.
Project to learn all docker tools
A Github Actions pipeline that builds safer containers
Docker Hardened Images Demo
Dockerized-COPA is a containerized solution for patching vulnerable container images using Project Copacetic (COPA). It simplifies the process of updating container images with security patches without requiring a complete rebuild from source.
Hands-on DevSecOps demo: a hardened, multi-stage Docker build for a Flask app with a Trivy CI security gate, SBOM generation (Syft), Docker Scout scanning, digest-pinned base images, and documented CVE exceptions. Build fails on HIGH/CRITICAL vulns.
This is a demo about the integration of Docker Scout with GitHub actions using the CLI.
Add a description, image, and links to the docker-scout topic page so that developers can more easily learn about it.
To associate your repository with the docker-scout topic, visit your repo's landing page and select "manage topics."