QSC18 Virtual Edition: Securing Containers - From Build to Deployments | Qualys

What you'll learn

• BUILD: At the ‘build’ stage, you can find and fix container vulnerabilities using Qualys CS’ Jenkins plug-in or REST APIs. Plug-ins for other CI/CD (continuous integration / continuous delivery) tools are in the works. - REGISTRY: As secure images are pushed to public or private registries, Qualys CS scans and analyzes them either on demand or on a pre-set schedule. - RUNTIME: At the ‘runtime’ stage, Qualys CS scans running containers for vulnerabilities and anomalous behaviors. - HOST: Using Qualys virtual scanners or agents, Qualys CS identifies vulnerabilities and compliance issues of Docker hosts.

Topics covered