Ben Griffiths

Tech, Programming, Clojure, Microservices. Staff Engineer @docker.

[JUXT @juxtpro]

Learn how #Clojure helps secure the software supply chain at @Docker. @joelittlejohn sits down with @kipzter, @wsbfg, @neilprosser, and @dansmithy to discuss the role of Clojure in Docker's @atomist platform: https://t.co/r2lyhQcDye

@juxtpro
#ClojureIn

[Ben Griffiths @wsbfg]

We're all really excited to have joined docker!

[Docker @Docker]

We are beyond *krilled* to *whalecome* @atomist to the Docker team.🥂 Learn more about what this acquisition means for container #security: https://t.co/mf11fA8bEA 🛡️🐳

[sındnp uɐıʇsıɹɥɔ @cdupuis]

Waking up to @atomist fixing vulnerabilities by automatically updating #docker base images via PR, building new images, comparing against what's currently deployed and - if less vulnerable - merge into main and finally delete branch. All while I had coffee. #DevSecOps

[Ben Griffiths @wsbfg]

How to prepare for the next major vulnerability? https://t.co/lq2JwzMW3S #log4shell #vulnerability

[sındnp uɐıʇsıɹɥɔ @cdupuis]

Don't just bindly use latest tag of any Docker image: e.g. the node:latest image has >600 packages installed with ~80 H & C CVEs. I bet you don't need all of those packages in your production environment. Choose your base image tag wisely. https://t.co/FLebPWgpP1

[Ben Griffiths @wsbfg]

We built a public database of docker image vulnerability scans. Check to see what's lurking on your images or maybe choose a better tag: https://t.co/btkB9adKDK

[Ben Griffiths @wsbfg]

These containers are vulnerable to the log4j zero day. Worth checking to see if you are running anything: https://t.co/Fjl6JNzvaf

[Ben Griffiths @wsbfg]

10 years of programming Clojure isn't long enough to remember which way around the less-than and greater-than symbols go.

[Ben Griffiths @wsbfg]

Check out my latest blog post: https://t.co/M7CXYjl6cG I tell the story of how a feature I was working came together and allowed us to fix some vulnerabilities at @atomist

[Ben Griffiths @wsbfg]

If you value reproducible builds you think about tagging your docker images: https://t.co/rbyxBWLifK #devsecops

[Ben Griffiths @wsbfg]

@KPPSPrimary Well done Lilia!

[Ben Griffiths @wsbfg]

We're very excited to release the public beta of our new platform!

[Ben Griffiths @wsbfg]

Awesome blog, on teaching kids with Lego, from my colleague @kipzter

[Ben Griffiths @wsbfg]

@lievendoclo @atomist It's a great mug! Might need a clean though :-)

[Ben Griffiths @wsbfg]

Some of what we've been working on recently

[DevOps.com @devopsdotcom]

Atomist Takes on Application Drift Management https://t.co/7cLOi3Rm6s

[Ben Griffiths @wsbfg]

Come along for some drinks and software chat tomorrow in London.

[Ben Griffiths @wsbfg]

@Elliot_F @awscloud @cloudfront I can second this - access currently not working from the UK at my company. US seems to be working.

[Ben Griffiths @wsbfg]

A fantastic article from @jessitron on why we need software to take control of our delivery and why the software defined delivery manifesto is important. https://t.co/E7ZSvqtzgP