221110 BridgeCrew PaloAlto helm misconfigs
Channel: Meetup Madness
Date: 2022-11-15

TOPIC: 10 HELM Chart Issues You're Probably Deploying & How to Fix Them
Headphones on! We’re going to queue up our favourite Spotify chart, “Top 10 helm misconfigurations” and see how many you all sing along to!

Diving into the not-so-chart-topping data from our recent artifacthub.io HELM chart security audit, we’re going to count down the “most played” tracks, finding and correcting any offensive lyrics along the way. The state of Kubernetes and Container security report highlights that 69% of respondents' Kubernetes security issues stem from misconfigurations or insecure defaults.

To get eyes on this, we paired our open source infrastructure as code scanner, Checkov.io, with the artifacthub.io chart repository to analyse, catalogue and report on the security posture of over 3000 automated Infrastructure as Code sources in their default "off-the-shelf" configurations.

Here we’ll dissect the results, providing real-world remediations and actionable intelligence for consumers and creators of public HELM charts and also deep-dive into the OSS scanning architecture itself, the checks and tooling involved, and how to implement automated scanning of your own Helm & Kubernetes deployments within your dev pipelines.

SPEAKER: Matt Johnson - Developer Advocate Lead at Bridgecrew.io
Problem Solver, Hacker, and Hands-on Developer Advocate.

Coming from a security and platform automation background, formerly at Cisco, I'm excited by the disruptive power of Infrastructure as Code, container and serverless orchestration in bringing scalable, cost-effective IT to companies of all sizes, powering future edge and low-latency computing needs, while also building awareness of the security challenges these new capabilities bring.

Believer in lifelong learning through theoretical and hands-on experience. Recent video: https://www.youtube.com/watch?v=umRtYMiRhEU