Session

Container scanning tools, industry publications, and application security experts are constantly telling us about best practices for how to build our images and run our containers. Often these non-functional requirements seem abstract and are not described well enough for those of us that don’t have an appsec background to fully understand why they are important.

In this session, we will:

• go over several of the most common practices to best containerize Python applications
• show examples of how your application can be exploited in a container
• and most importantly, how to easily spot issues and fix your Dockerfiles and deployment manifests before you commit your code