Thank you, but your body is blocking the some part of the scripts for this video. Build_image job succeeded when the missing part is completed like: "- docker build --tag $CONTAINER_TEST_IMAGE --tag $CI_REGISTRY_IMAGE ." Moreover, DOCKER_IMAGE variable gives error right now. I used CS_IMAGE variable instead of it and container_scanning job is succeeded.
@RomanoRoth
Ай бұрын
Oh I'm very sorry: Here is the full source code: gitlab.com/romano_roth/gitlabdevsecopspipeline
@bashardlaleh2110
10 ай бұрын
why are we pushing the image to registry before scanning? Is the container scanning tool only able to scan images after they're pushed to a container registry?
@RomanoRoth
10 ай бұрын
Because this is a prerequisite of GitLab Container Scanning: docs.gitlab.com/ee/user/application_security/container_scanning/#prerequisites
@manifestabundanceprosperit5230
Жыл бұрын
great job... please how do I remediate the vulurability I found, after scanning ....? thanks
@RomanoRoth
Жыл бұрын
Container scanning is a security feature that analyzes the contents of container images for known vulnerabilities. If vulnerabilities are detected, the container scanning feature can alert you and provide guidance on how to remediate them. To remediate vulnerabilities identified by container scanning in GitLab, you can follow these steps: 1. Identify the vulnerabilities: The first step is to identify the vulnerabilities that have been detected by container scanning. This information should be available in the container scan report. 2. Prioritize the vulnerabilities: Once you have identified the vulnerabilities, it is important to prioritize them based on their severity and impact on your system. High-severity vulnerabilities should be addressed as soon as possible, while low-severity vulnerabilities can be addressed at a later time. 3. Update the container image: One of the most effective ways to remediate vulnerabilities is to update the container image to a version that includes fixes for the identified vulnerabilities. If an updated version of the image is not available, you may need to patch the image manually. 4. Test the updated image: After updating the container image, it is important to test the image to ensure that it is still functional and that the vulnerabilities have been properly addressed. 5. Deploy the updated image: Once you have tested the updated image and are confident that it is secure, you can deploy it to replace the vulnerable image. By following these steps, you can effectively remediate vulnerabilities identified by container scanning in GitLab. It is important to regularly scan your container images to ensure that they are secure and free from known vulnerabilities.
@manifestabundanceprosperit5230
Жыл бұрын
MANIFEST ABUNDANCE & PROSPERITY TODAY 0 seconds ago great job... please how do I remediate the vulurability I found, after scanning ....? thanks
@RomanoRoth
Жыл бұрын
Container scanning is a security feature that analyzes the contents of container images for known vulnerabilities. If vulnerabilities are detected, the container scanning feature can alert you and provide guidance on how to remediate them. To remediate vulnerabilities identified by container scanning in GitLab, you can follow these steps: 1. Identify the vulnerabilities: The first step is to identify the vulnerabilities that have been detected by container scanning. This information should be available in the container scan report. 2. Prioritize the vulnerabilities: Once you have identified the vulnerabilities, it is important to prioritize them based on their severity and impact on your system. High-severity vulnerabilities should be addressed as soon as possible, while low-severity vulnerabilities can be addressed at a later time. 3. Update the container image: One of the most effective ways to remediate vulnerabilities is to update the container image to a version that includes fixes for the identified vulnerabilities. If an updated version of the image is not available, you may need to patch the image manually. 4. Test the updated image: After updating the container image, it is important to test the image to ensure that it is still functional and that the vulnerabilities have been properly addressed. 5. Deploy the updated image: Once you have tested the updated image and are confident that it is secure, you can deploy it to replace the vulnerable image. By following these steps, you can effectively remediate vulnerabilities identified by container scanning in GitLab. It is important to regularly scan your container images to ensure that they are secure and free from known vulnerabilities.
Пікірлер: 9