Adam Lewis - 2018 DevSecOps

Docker Registries represent the source of truth for Docker Images, and a single point of compromise for attackers. This talk will explore work done by the community to mitigate this threat, including The Update Framework specification, Notary open source software, and Docker Content Trust.