A Day in the Life of a Developer: Moving Code from Development to Production Without Losing Control
Jason Epstein, Senior Solutions Engineer for Mirantis, takes you through securing code with image registries, moving applications from your development to production environments, and maintaining a secure software supply chain.
Get started with Mirantis Secure Registry today: https://www.mirantis.com/download/mir...
Learn more about the secure software supply chain: https://www.mirantis.com/blog/what-is...
CHAPTERS
0:00 Introduction
0:46 What is the software supply chain?
2:07 What is the risk?
2:24 Key Risk Areas
4:43 Secure Software Supply Chain
5:50 What we need
7:56 Make code changes
8:07 Commit changes
8:29 Kick off Jenkins process
8:37 Check code, build image, run unit tests
8:45 Image pushed to Mirantis Secure Registry (MSR)
9:37 Perform vulnerability scan
9:58 View vulnerability scan results
10:48 Create image promotion policy
11:55 Review image promotion policy
12:34 Deploy image to Dev environment
13:00 Set up Web Hooks to call integration tests
13:20 Run integration tests
13:48 Check existing signatures & begin final sign off
15:31 Run in production