Too many options? Treat your friends and family to their favourite stores with a Bayshore Shopping Centre gift card, redeemable at participating retailers throughout the centre. Click below to purchase yours today!Purchase Here
Coles Trivy Deep Dive: Container, IaC, and SBOM Scanning in CI/CD at Bayshore Shopping Centre in Ottawa, ON
*Product information may vary - to confirm product availability, pricing, shipping and return information please contact Coles
"Trivy Deep Dive: Container, IaC, and SBOM Scanning in CI/CD"
Security scanning only helps when it changes engineering outcomes—without turning delivery into a game of broken builds and ignored alerts. This book is written for experienced platform, DevOps, and security engineers who already run CI/CD at scale and want a rigorous, operational understanding of how Trivy fits into modern DevSecOps pipelines. It focuses on building durable feedback loops, not one-off scans, and on making scan results trustworthy enough to enforce.
You’ll learn to execute Trivy deterministically across laptops and CI by pinning versions, standardizing the CLI execution model, and treating artifact identity (digests over tags) as non-negotiable. The book goes deep on vulnerability scanning semantics, fix-availability-driven decisions, stable CI gating patterns, and auditable exception workflows. It also treats misconfiguration scanning as preventive control for IaC and GitOps, adds secret and license scanning as practical guardrails, and culminates in SBOM generation and consumption—covering SPDX and CycloneDX choices, traceability, and SBOM-driven correlation.
Beyond features, the emphasis is operational excellence: database and checks-bundle lifecycle management, caching strategies for ephemeral runners and monorepos, secure output routing (JSON/SARIF/templates), and platform-agnostic CI/CD reference designs. Expect trade-offs, failure modes, and patterns for enterprise and air-gapped environments throughout.
"Trivy Deep Dive: Container, IaC, and SBOM Scanning in CI/CD"
Security scanning only helps when it changes engineering outcomes—without turning delivery into a game of broken builds and ignored alerts. This book is written for experienced platform, DevOps, and security engineers who already run CI/CD at scale and want a rigorous, operational understanding of how Trivy fits into modern DevSecOps pipelines. It focuses on building durable feedback loops, not one-off scans, and on making scan results trustworthy enough to enforce.
You’ll learn to execute Trivy deterministically across laptops and CI by pinning versions, standardizing the CLI execution model, and treating artifact identity (digests over tags) as non-negotiable. The book goes deep on vulnerability scanning semantics, fix-availability-driven decisions, stable CI gating patterns, and auditable exception workflows. It also treats misconfiguration scanning as preventive control for IaC and GitOps, adds secret and license scanning as practical guardrails, and culminates in SBOM generation and consumption—covering SPDX and CycloneDX choices, traceability, and SBOM-driven correlation.
Beyond features, the emphasis is operational excellence: database and checks-bundle lifecycle management, caching strategies for ephemeral runners and monorepos, secure output routing (JSON/SARIF/templates), and platform-agnostic CI/CD reference designs. Expect trade-offs, failure modes, and patterns for enterprise and air-gapped environments throughout.
Coles is renowned for its outstanding customer service and great selection of books. Along with the vast array of magazines, stationary, audio-books, children's literature, fiction, non-fiction and reference books, you can find accessories to make your reading experience more pleasurable. We can recommend the very best in reading today. We will help you search our titles for exactly what you need, and if we do not have it in stock, we will order it for you.
