Secure Multi-Architecture Containers with Trivy on Azure Cobalt 100 #2850

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open

odidev wants to merge 1 commit into ArmDeveloperEcosystem:main from odidev:trivy_LP

content/learning-paths/servers-and-cloud-computing/trivy-on-gcpp/_index.md

-Original file line number
+Diff line change
@@ -0,0 +1,69 @@
+    ---
+    title: Secure Multi-Architecture Containers with Trivy on Azure Cobalt 100 (Arm64)
+    minutes_to_complete: 45
+    who_is_this_for: This learning path is designed for developers and DevOps engineers who want to integrate security scanning into CI/CD pipelines for multi-architecture container images.
+    learning_objectives:
+        - Provision an Azure Arm64 virtual machine using Azure console, with Ubuntu Pro 24.04 LTS as the base image
+        - Build multi-architecture (amd64/arm64) container images for Azure Cobalt 100
+        - Install and configure Trivy on Arm64 Ubuntu systems
+        - Scan container images for vulnerabilities locally and in CI
+        - Configure self-hosted GitHub Actions Arm runners
+        - Enforce security gates in CI/CD pipelines based on vulnerability severity
+        - Generate and analyze JSON reports for compliance and audit purposes
+    prerequisites:
+        - A [Microsoft Azure](https://azure.microsoft.com/) account with access to Cobalt 100 based instances (Dpsv6)
+        - Docker installed and basic knowledge of containerization
+        - Familiarity with CI/CD concepts
+        - Basic knowledge of Linux command-line operations
+    author: Pareena Verma
+    ### Tags
+    skilllevels: Introductory
+    subjects: Containers and Virtualization
+    cloud_service_providers: Microsoft Azure
+    armips:
+        - Neoverse
+    tools_software_languages:
+        - Trivy
+        - Docker
+        - GitHub Actions
+        - YAML
+    operatingsystems:
+        - Linux
+    further_reading:
+      - resource:
+          title: Trivy Official Website
+          link: https://trivy.dev
+          type: website
+      - resource:
+          title: Trivy GitHub Repository
+          link: https://github.com/aquasecurity/trivy
+          type: website
+      - resource:
+          title: Docker Official Documentation
+          link: https://docs.docker.com/
+          type: documentation
+      - resource:
+          title: GitHub Actions Documentation
+          link: https://docs.github.com/en/actions
+          type: documentation
+      - resource:
+          title: Microsoft Azure Cobalt 100 Overview
+          link: https://techcommunity.microsoft.com/blog/azurecompute/announcing-the-preview-of-new-azure-vms-based-on-the-azure-cobalt-100-processor/4146353
+          type: documentation
+    ### FIXED, DO NOT MODIFY
+    # ================================================================================
+    weight: 1
+    layout: "learningpathall"
+    learning_path_main_page: "yes"
+    ---

content/learning-paths/servers-and-cloud-computing/trivy-on-gcpp/_next-steps.md

-Original file line number
+Diff line change
@@ -0,0 +1,8 @@
+    ---
+    # ================================================================================
+    #       FIXED, DO NOT MODIFY THIS FILE
+    # ================================================================================
+    weight: 21                  # Set to always be larger than the content in this path to be at the end of the navigation.
+    title: "Next Steps"         # Always the same, html page title.
+    layout: "learningpathall"   # All files under learning paths have this same wrapper for Hugo processing.
+    ---

content/learning-paths/servers-and-cloud-computing/trivy-on-gcpp/background.md

-Original file line number
+Diff line change
@@ -0,0 +1,21 @@
+    ---
+    title: "Overview"
+    weight: 2
+    ### FIXED, DO NOT MODIFY
+    layout: "learningpathall"
+    ---
+    ## Cobalt 100 Arm-based processor
+    Azure Cobalt 100 is Microsoft’s first-generation Arm-based processor, designed for cloud-native, scale-out Linux workloads. Based on Arm’s Neoverse-N2 architecture, it is a 64-bit CPU that delivers improved performance and energy efficiency. Running at 3.4 GHz, it provides a dedicated physical core for each vCPU, ensuring consistent and predictable performance. Typical workloads include web and application servers, data analytics, open-source databases, and caching systems.
+    To learn more, see the Microsoft blog [Announcing the preview of new Azure virtual machines based on the Azure Cobalt 100 processor](https://techcommunity.microsoft.com/blog/azurecompute/announcing-the-preview-of-new-azure-vms-based-on-the-azure-cobalt-100-processor/4146353).
+    ## Trivy
+    Trivy is an open-source vulnerability scanner designed to detect security issues in container images, filesystems, and infrastructure configurations. It is widely used in modern DevSecOps workflows to identify known vulnerabilities in operating system packages and application dependencies.
+    You can use Trivy to perform fast and reliable security scans on container images built for multiple architectures, including Arm64. It helps teams shift security left by detecting vulnerabilities early in the development and CI/CD pipeline.
+    Learn more at the [Trivy official website](https://trivy.dev/) and in the [Trivy documentation](https://trivy.dev/docs/).

...earning-paths/servers-and-cloud-computing/trivy-on-gcpp/images/arm64-runner.png

Sorry, something went wrong. Reload?