Building confidence via automated container security scanning - Xavier Vello - DockerCon EU 2018
Container image security scanners are one of several tools we use in our development process to ensure the software that we ship to our customers is reliable and safe. In this talk, we’ll discuss our approach to continuous vulnerability monitoring (spoiler: it’s all automated), and how it increases our responsiveness while decreasing our operational cost.
Using the Datadog platform, we went from manually checking our scan results, to getting relevant results automatically pushed to us as soon as a new vulnerabilities are detected. Through careful automation and measurement, we’ve built a culture of trust and confidence in our systems that allows us to concentrate on the bigger picture, and we’d like to share our journey with you!