CloudNativeSecurityCon North America 2024

A newbie to our cloud native community can easily be overwhelmed: OCI specifications, SBOMs, build pipelines, image scanning, secure supply chain! The terminology, tools, and practices are moving quickly and new developers can find themselves lost amidst the information overload! This talk will provide an easily understandable guide to the container image format as it relates to the tools and practices that are critical to using containers security and confidently in application deployments in the cloud, on Kubernetes, or in a myriad of other ways they are used today. We'll boil all this down to five critical facts that developers should understand about how images work and how the world of security tools and practices interact with these fundamental principles. Hopefully new (and old) developers alike will find this space demystified and approachable in a way they haven't before!