Скачать или смотреть CH-3.2 – Static Analysis Of Docker | AWS EKS Security Masterclass with OWASP EKS Goat

Static Application Security Testing (SAST) plays a critical role in securing Docker containers before they ever reach production. In this video, we focus on how SAST applies specifically to Docker images, Dockerfiles, and container configurations to catch vulnerabilities and misconfigurations early in the development lifecycle.

In this video you will:

Understand what SAST (Static Application Security Testing) is in the context of Docker containers
Learn why scanning Docker images and Dockerfiles early is critical for container security
Identify common Docker security issues such as running containers as root, using `latest` tags, exposed ports, and hardcoded credentials
Learn how Docker image vulnerabilities and misconfigurations are detected before production
Use Dockle to scan Docker images for security best-practice violations
Understand Dockle findings like root user usage, credential storage, and insecure image configurations
Use Hadolint to lint Dockerfiles and enforce Dockerfile security best practices
Learn how to interpret Hadolint rule IDs and selectively ignore findings
Perform a full Docker host and container security assessment using *Docker Bench Security*
Understand Docker Bench Security checks across host configuration, Docker daemon, container runtime, images, operations, and Docker Swarm
Safely clean up Docker containers, images, and lab artifacts after testing

This hands-on lab is part of the #OWASP EKS Goat project, where we demonstrate real-world container and cloud security misconfigurations along with secure, production-ready alternatives. The focus is on building strong fundamentals that directly translate to Kubernetes and enterprise environments.

This chapter is part of the #AWS EKS Security Masterclass on PeachyCloudSecurity YouTube, presented by **TheShuklaDuo (Anjali & Divyanshu)**.

Docs & Labs
📓 OWASP EKS Goat Docs: https://eksgoat.peachycloudsecurity.com
📘 OWASP EKS Goat Repo: https://github.com/OWASP/www-project-...

🌐 Get all links and labs: https://peachycloudsecurity.com

🌊 LinkedIn: https://linktr.ee/peachycloudsecurity
🎥 YouTube:    / @peachycloudsecurity  
📸 Instagram: instagram.com/peachycloudsecurity
👍 Topmate: topmate.io/peachycloudsecurity

#DockerSecurity #SAST #ContainerSecurity #DockerSAST
#DevSecOps #CloudSecurity #OWASPEKSGoat
#EKSMasterclass #KubernetesSecurity
#Dockle #Hadolint #DockerBenchSecurity
#PeachyCloudSecurity #TheShuklaDuo #CloudNativeSecurity