container-security
Resources for the O'Reilly Container Security book
Software Vulnerabilities in Images
References
- p. 105 — TechRepublic: Threat actors (Mandiant report 2024)
- p. 106 — AI Cyber Challenge
- p. 106 — ReversingLabs: Automated AI fuzzing targets open-source LLM vulnerabilities
- p. 106 — Ars Technica: Curl maintainers push back on AI “slop” bug reports
- p. 106 — ITPro: “AI slop” security reports
- p. 106 — MITRE
- p. 106 — CVE Program CNAs
- p. 106 — NVD (National Vulnerability Database)
- p. 107 — CVE-2014-6271
- p. 107 — Ubuntu security notice for CVE-2014-6271
- p. 109 — Trivy
- p. 113 — Anchore Grype
- p. 113 — Docker Scout
- p. 113 - Harbor
- p. 113 - Trivy Operator
- p. 113 — Liquid Reply Trivy walkthrough
- p. 113 — Red Hat Blog: Evolving OVAL
- p. 113 - Red Hat Security Data API
- p. 114 — Alpine Linux security database (secdb)
- p. 114 — Alpine Linux aports (package metadata)
- p. 114 - Debian shadow package
- p. 116 — VirusTotal YARA
- p. 119 — AWS blog: Scanning images with Trivy in CodePipeline
- p. 119 — GitLab Docs: Container scanning
- p. 119 — ITNEXT: Multi-arch container build pipeline with Docker BuildKit
- p. 120 — FedRAMP: CSP Continuous Monitoring Strategy Guide (PDF)
- p. 120 — CISA: BOD 19-02 — Vulnerability remediation for internet-accessible systems
- p. 120 — GitHub Docs: Dependabot quickstart
- p. 120 — Mandiant
- p. 121 — Edward Snowden