24. Grype Tutorial for Docker

We'll be learning most important topics required in DevSecOps Practices

Timestamps:
00:00 Intro
00:51 Similar tools as Grype for Docker Image Security
01:30 Image Security vs Container Security
02:35 Grype Overview
07:05 SBOMs Overview
07:35 Features of Grype Tool
09:30 Installing Chocolatey
13:50 Installing Grype
21:58 Grype CLI Commands & Functionalities
23:22 Update Vulnerability Database
25:00 Find a Vulnerable Image in Docker Hub
29:21 Trigger Image Scans
31:40 Write Vulnerability Findings in a File
36:16 Explain a Vulnerability using CVE ID

GitHub: https://github.com/ManthanDhole
LinkedIn:   / manthan-dhole2208  
Instagram:   / _manthan_dhole  

Youtube Playlists
The AWS Series:    • The AWS Series  
The DevSecOps Series:    • The DevSecOps Series  
DevOps, Cloud and Software Engineering:    • DevOps, Cloud, Software Engineering and Cy...  

#aws #awssecurity #awsservices #cloud #computing #cloudcomputing #cloudengineer #awsdevops #softwareengineering
#devsecopsinterview #devsecopsinterviewquestions #devsecops #cybersecurity #devopssecurity #cloudsecurity #softwareengineer #softwaredevelopment #cloud #cloudengineer #coding #itindustry #aws #devops #devopsengineer #cloudengineer #linux #technology #devsecops #engineer #devops #devsecopsinterviewquestions #hiring #cybersecurity #thedevsecopsseries #interivew #questions #preparation #india #developer #security #interviewpreparation #cve #cwe #cvss #epss #threat #threatmodelling #dread #pasta #stride #youtube #subscribe #playlist #devsecopsconcepts #sast #dast #sca #testing #aws #softwarecompositionanalysis #snyk #sonarqube #endorlabs #github #ghas #gitlab #jfrog #artifactory #xray #jas #sonatype #chainguard #sonarqube #devsecopstools #dependencycheck #owasp #dependency #check #nvd #cisa #oss #sonatype #ghas #github #advanced #security #secretdetection #secretscanning #secret #scanning #advanced #security #container #security