Mission accomplished: How to enhance the security of Java containers in 45 minutes
Hello everyone The March meetup is already next week. This time we are meeting at the Altel Digital office with an interesting report.
Speaker: Ekaterina Edelweiss, Developer Advocate at Bellsoft
What is the report about:
Your mission is to transform a bloated, vulnerability—filled container image into a compact and secure image with minimal attack surface and a clear risk management strategy. You have 45 minutes before the attack begins. Time has passed!
At Doklam, we will discuss in detail how to build more secure and supported images for Java applications. Let's talk about typical problems: outdated dependencies, an unsuitable base image, the lack of a verifiable origin of artifacts, and excessive privileges. Then we'll draw up a step-by-step action plan.:
- Remove unnecessary privileges;
- Let's fix the versions and generate the SBOM;
- Scanning and prioritizing vulnerabilities;
- We'll set up automatic update checking.
- Let's choose a minimal and supported base image.;
You will find a comparison of the scan results before and after, ready-made Dockerfile fragments and a reproducible process for creating secure container images for Java.
Who will be interested in the report:
• Java developers at the Middle and Senior levels who work with Docker and build container images for their applications.
• SRE, DevOps, and Platform engineers responsible for container assembly, security, and operation in Kubernetes and CI/CD.
• Technical experts and architects who make decisions about basic images, dependencies, and security processes in development.
• Engineers interested in container security, SBOM, vulnerability scanning, and best practices for creating secure Docker images.
The program of the evening:
18:45 Gathering of guests and pizza time
19:00 Report
19:35 Q&A
20:00 Networking
Participation is free, registration via the google form is required.: https://forms.gle/m5PTwUBo3BdN5kCt7
See you!
