Master production-grade best practices to build your Node.js Docker images [eng]
Talk presentation
You thought you figured out how to build your Node.js web applications with Docker? Chances are, you're probably missing out on a lot! Many articles on this topic have been written, yet sadly, without thoughtful consideration of security and production best practices for building Node.js Docker images.
In this session, we run through step-by-step production-grade guidelines for building optimized and secure Node.js Docker images by understanding the pitfalls and insecurities with every Dockerfile directive and then fixing it. We will also be hacking a live running Node.js Docker container and demonstrate several vectors of attacks. Join in and master the Node.js best practices for Docker-based applications.
Liran Tal
Snyk
- Liran Tal is an award-winning software developer, security researcher, and open source champion in the JavaScript community
- He's an internationally recognized GitHub Star, acknowledged for his open source advocacy, and has received the OpenJS Foundation's Pathfinder for Security for his work on Node.js security
- His contributions to developer security education include leading OWASP projects, building supply chain security tools, participation in CNCF and OpenSSF initiatives, and authoring books such as O'Reilly's Serverless Security
- He leads the developer advocacy team at Snyk.io and is on a mission to empower developers with better application security skills
- Twitter, Github, Web-site