CH-3.2 – Static Analysis Of Docker | AWS EKS Security Masterclass with OWASP EKS Goat скачать в хорошем качестве

CH-3.2 – Static Analysis Of Docker | AWS EKS Security Masterclass with OWASP EKS Goat

Static Application Security Testing (SAST) plays a critical role in securing Docker containers before they ever reach production. In this video, we focus on how SAST applies specifically to Docker images, Dockerfiles, and container configurations to catch vulnerabilities and misconfigurations early in the development lifecycle. In this video you will: Understand what SAST (Static Application Security Testing) is in the context of Docker containers Learn why scanning Docker images and Dockerfiles early is critical for container security Identify common Docker security issues such as running containers as root, using `latest` tags, exposed ports, and hardcoded credentials Learn how Docker image vulnerabilities and misconfigurations are detected before production Use Dockle to scan Docker images for security best-practice violations Understand Dockle findings like root user usage, credential storage, and insecure image configurations Use Hadolint to lint Dockerfiles and enforce Dockerfile security best practices Learn how to interpret Hadolint rule IDs and selectively ignore findings Perform a full Docker host and container security assessment using *Docker Bench Security* Understand Docker Bench Security checks across host configuration, Docker daemon, container runtime, images, operations, and Docker Swarm Safely clean up Docker containers, images, and lab artifacts after testing This hands-on lab is part of the #OWASP EKS Goat project, where we demonstrate real-world container and cloud security misconfigurations along with secure, production-ready alternatives. The focus is on building strong fundamentals that directly translate to Kubernetes and enterprise environments. This chapter is part of the #AWS EKS Security Masterclass on PeachyCloudSecurity YouTube, presented by **TheShuklaDuo (Anjali & Divyanshu)**. Docs & Labs 📓 OWASP EKS Goat Docs: https://eksgoat.peachycloudsecurity.com 📘 OWASP EKS Goat Repo: https://github.com/OWASP/www-project-... 🌐 Get all links and labs: https://peachycloudsecurity.com 🌊 LinkedIn: https://linktr.ee/peachycloudsecurity 🎥 YouTube:    / @peachycloudsecurity   📸 Instagram: instagram.com/peachycloudsecurity 👍 Topmate: topmate.io/peachycloudsecurity #DockerSecurity #SAST #ContainerSecurity #DockerSAST #DevSecOps #CloudSecurity #OWASPEKSGoat #EKSMasterclass #KubernetesSecurity #Dockle #Hadolint #DockerBenchSecurity #PeachyCloudSecurity #TheShuklaDuo #CloudNativeSecurity