Building Images for the Secure Supply Chain

Explore techniques and tools for building secure container images in this conference talk from GOTO Amsterdam 2023. Learn how to reduce CVE counts by minimizing dependencies, understand the importance of regular updates, and discover how to use apko for building container images with SBOMs and complete reproducibility. Dive into topics like vulnerability scanners, Redis security considerations, and the Wolfi Linux distribution. Gain practical insights to improve your organization's container security posture and address common challenges in the secure software supply chain.

Intro
Quiz
Vulnerabilities scanners
Redis
What is Wolfi
Summary
Outro