- A Cloud Guru
Securing Containerized GCP Web Apps
A critical step in software development security is to identify vulnerabilities within container images and running web apps. In this hands-on lab, you'll identify security vulnerabilities within a container image and perform web app security vulnerability scanning using Web Security Scanner.
Table of Contents
Enable Container Registry
Enable the Google Container Registry API and the Container Scanning API using the GCP console.
Docker Pull, Tag, and Push Container Image
Using the Cloud Shell, perform the following tasks:
- Pull the DVWA Docker image.
- Tag the DVWA Docker image.
- Authenticate Docker to the Google Cloud Container Registry:
- Push the DVWA Docker image.
Use Container Registry to view the vulnerabilities associated with the container image.
Deploy Container on a VM Instance
Create a new Compute Engine VM instance, using the newly pushed image, in the GCP console.
Reserve Static IP Address
- From the GCP console, navigate to the IP Addresses page.
- For the External IP, go to the far right and click the three vertical dots, and choose Promote to static IP address.
Create and Run Scan Using Web Security Scanner
- Enable the Web Security Scanner service using the GCP console.
- Create a Web Security Scanner scan.
- Run the newly created Web Security Scanner scan.
What's a lab?
Hands-on Labs are real environments created by industry experts to help you learn. These environments help you gain knowledge and experience, practice without compromising your system, test without risk, destroy without fear, and let you learn from your mistakes. Hands-on Labs: practice your skills before delivering in the real world.