All courses
Resource hub
Featured resource
Forrester Wave Report 2025
Pluralsight named a Leader in the Forrester Wave™

Our tech skill development platform earned the highest scores possible across 11 criteria.

Learn more
Hamburger Icon
  • Labs icon Lab
  • Cloud
Labs

Securing Containerized GCP Web Apps

A critical step in software development security is to identify vulnerabilities within container images and running web apps. In this hands-on lab, you'll identify security vulnerabilities within a container image and perform web app security vulnerability scanning using Web Security Scanner.

Get started Contact sales
Labs

Path Info

Level
Clock icon Intermediate
Duration
Clock icon 45m
Published
Clock icon Apr 20, 2023

Contact sales

By filling out this form and clicking submit, you acknowledge our privacy policy.

Table of Contents

  1. Challenge

    Enable Artifact Registry

    Enable the Artifact Registry AP and the Container Scanning API using the GCP console.

  2. Challenge

    Docker Pull, Tag, and Push Container Image

    Using the Cloud Shell, perform the following tasks:

    1. Pull the DVWA Docker image.
    2. Tag the DVWA Docker image.
    3. Authenticate Docker to the Google Cloud Artifact Registry:
    4. Push the DVWA Docker image.

  3. Challenge

    View Vulnerabiilties

    Use Artifact Registry to view the vulnerabilities associated with the container image.

  4. Challenge

    Deploy Container on a VM Instance

    Create a new Compute Engine VM instance, using the newly pushed image, in the GCP console.

  5. Challenge

    Reserve Static IP Address

    1. From the GCP console, navigate to the IP Addresses page.
    2. For the External IP, go to the far right and click the three vertical dots, and choose Promote to static IP address.

  6. Challenge

    Create and Run Scan Using Web Security Scanner

    1. Enable the Web Security Scanner service using the GCP console.
    2. Create a Web Security Scanner scan.
    3. Run the newly created Web Security Scanner scan.
Pluralsight Skills - Labs - Pluralsight
Author
Pluralsight Skills

Pluralsight Skills gives leaders confidence they have the skills needed to execute technology strategy. Technology teams can benchmark expertise across roles, speed up release cycles and build reliable, secure products. By leveraging our expert content, skill assessments and one-of-a-kind analytics, keep up with the pace of change, put the right people on the right projects and boost productivity. It's the most effective path to developing tech skills at scale.

What's a lab?

Hands-on Labs are real environments created by industry experts to help you learn. These environments help you gain knowledge and experience, practice without compromising your system, test without risk, destroy without fear, and let you learn from your mistakes. Hands-on Labs: practice your skills before delivering in the real world.

Provided environment for hands-on practice

We will provide the credentials and environment necessary for you to practice right within your browser.

Guided walkthrough

Follow along with the author’s guided walkthrough and build something new in your provided environment!

Did you know?

On average, you retain 75% more of your learning if you get time for practice.
Ready to get started?
View individual plans View team plans