DevOps World | Jenkins World 2018

As container build techniques continue to extend into more software delivery flows, the variance in software being produced, in the form of container images, has increased dramatically. We present the Anchore security and best-practice enforcement system, and show how the open-source Anchore Engine can be quickly integrated into Jenkins 
flows. Anchore's policy-based scanning engine is customizable, including checks for software vulnerabilities, accidental presence of secrets/keys, Dockerfile checks, and more. In this talk, we provide an overview of Anchore's capabilities, & review examples of how Anchore security and best-practice scanning can be added quickly to existing 
Jenkins builds.