Skip to content

Commit 78c8af6

Browse files
authored
Executable tutorial: Building a secure CI/CD for Containers with Chainguard (#2899)
* leo3-ferran demo proposal * Feedback on Demo: Blue Green Deployment * Revert "Merge branch 'KTH:2025' into 2025" This reverts commit f14a3dd, reversing changes made to c6e0794. * delete Feedback document * Reapply "Merge branch 'KTH:2025' into 2025" This reverts commit 37c4e3c. * OPA-focused demo proposal * Add correct directory location for demo * Delete Week 6 demo proposal * Add Presentation Proposal * Add Presentation Proposal * Add executable tutorial proposal
1 parent 191b300 commit 78c8af6

1 file changed

Lines changed: 36 additions & 0 deletions

File tree

  • contributions/executable-tutorial/valganon-solanes
Lines changed: 36 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,36 @@
1+
# Assignment Proposal
2+
3+
## Title
4+
5+
Building a secure CI/CD for Containers with Chainguard
6+
7+
## Names and KTH ID
8+
9+
- Miguel Valgañon (valganon@kth.se)
10+
- Ferran Solanes (solanes@kth.se)
11+
12+
## Deadline
13+
14+
- Task 3
15+
16+
## Category
17+
18+
- Executable tutorial
19+
20+
## Description
21+
22+
In this tutorial, we will use Killercoda to build a small application, containerize it with Docker, and then integrate Chainguard in the CI/CD to scan the resulting image. If Chainguard deems the image insecure, the pipeline will fail, and therefore the insecure container will not be deployed. This ensures that only secure, and signed images are deployed in a Kubernetes cluster.
23+
24+
At the end of the tutorial, the user should be able to deploy a CI/CD pipeline, which takes security into account using Chainguard, as well as be familiar with the Kubernetes environment.
25+
26+
Steps of the tutorial:
27+
1- Set up environment; Docker, Chainguard, Kubernetes
28+
2- Create the CI/CD (With Jenkins)
29+
3- Develop a Simple application
30+
4- Containerize the application with Docker
31+
5- Run Pipeline to check the container for vulnerabilities. The container will be deployed if Chainguard deems it secure.
32+
33+
**Relevance**
34+
35+
This tutorial is relevant to this course, since it is a crucial part of the DevOps lifecycle, and more specifically to the DevSecOps practices. It is a mix of the topics studied on Weeks 2, 3 and 6. By incorporating Chainguard into CI/CD workflows, teams ensure that only verified, vulnerability-free images reach deployment, reducing risk and improving reliablility.
36+

0 commit comments

Comments
 (0)