SlideShare a Scribd company logo
Auto-Cascading
Security Updates
Through Docker Images
Andrey Falko
Salesforce Infrastructure
Statement under the Private Securities Litigation Reform Act of 1995:
This presentation may contain forward-looking statements that involve risks, uncertainties, and assumptions. If any such uncertainties materialize
or if any of the assumptions proves incorrect, the results of salesforce.com, inc. could differ materially from the results expressed or implied by
the forward-looking statements we make. All statements other than statements of historical fact could be deemed forward-looking, including any
projections of product or service availability, subscriber growth, earnings, revenues, or other financial items and any statements regarding
strategies or plans of management for future operations, statements of belief, any statements concerning new, planned, or upgraded services or
technology developments and customer contracts or use of our services.
The risks and uncertainties referred to above include – but are not limited to – risks associated with developing and delivering new functionality
for our service, new products and services, our new business model, our past operating losses, possible fluctuations in our operating results and
rate of growth, interruptions or delays in our Web hosting, breach of our security measures, the outcome of any litigation, risks associated with
completed and any possible mergers and acquisitions, the immature market in which we operate, our relatively limited operating history, our
ability to expand, retain, and motivate our employees and manage our growth, new releases of our service and successful customer deployment,
our limited history reselling non-salesforce.com products, and utilization and selling to larger enterprise customers. Further information on
potential factors that could affect the financial results of salesforce.com, inc. is included in our annual report on Form 10-K for the most recent
fiscal year and in our quarterly report on Form 10-Q for the most recent fiscal quarter. These documents and others containing important
disclosures are available on the SEC Filings section of the Investor Information section of our Web site.
Any unreleased services or features referenced in this or other presentations, press releases or public statements are not currently available and
may not be delivered on time or at all. Customers who purchase our services should make the purchase decisions based upon features that are
currently available. Salesforce.com, inc. assumes no obligation and does not intend to update these forward-looking statements.
Forward-Looking Statements
The problem
Security Researcher
Vulnerability
Code Patch Distribution Package
Public Disclosure
OS Base Image Java Base Image Application Image
Python Base Image Application Image
Application Image
Application ImageRuby Base Image
The problem
Security Researcher
Vulnerability
Code Patch Distribution Package
Public Disclosure
OS Base Image Java Base Image Application Image
Python Base Image Application Image
Application Image
Application ImageRuby Base Image

Recommended for you

Salesforce Winter 14 Release - Summary
Salesforce Winter 14 Release  - Summary Salesforce Winter 14 Release  - Summary
Salesforce Winter 14 Release - Summary

Here's something that'll help you understand which features apply to which edition. If you're on PE, there are some great features for Chatter, Sales Cloud, Analytics, Mobile, Site.com, and Force.com customisation. (Created by Salesforce)

salesforce.comsalesforcewinter14
Summer '13 Developer Preview Webinar
Summer '13 Developer Preview WebinarSummer '13 Developer Preview Webinar
Summer '13 Developer Preview Webinar

Watch this webinar to discover new and updated Salesforce Platform features coming in the Summer '13 Release including: Force.com Canvas (GA) -- Force.com Canvas is now generally available and supports multiple canvases on a page, ability for canvases to talk to each other, distribution through standard packaging processes, and more. Chatter in Apex (GA) -- Chatter in Apex (formerly Connect in Apex) exposes Chatter API objects in Apex, and is now generally available with new classes and methods. The documentation can now be found in the Apex Developer’s Guide. Visualforce Updates -- There are several Visualforce enhancements including configurable timeout for JavaScript remoting, HTML5 output generation options, and various new components. API Updates -- Lots of API Updates including new objects, SOQL/SOSL clauses, and metadata types for easier deployments. ISVForce -- ISVForce has many new additions in Summer ‘13 including an Environment Hub for storing easily switching between orgs, installing/uninstalling packages with the API, and creating trialforce signups using the API.

developersdeveloper forceanalytics api
AngularJS App In Two Weeks
AngularJS App In Two WeeksAngularJS App In Two Weeks
AngularJS App In Two Weeks

AngularJS application on Visualforce for the Force.com platform and the Salesforce1 mobile application. Dreamforce 2014. Talk is given for experienced Salesforce developers who want to learn common features of AngularJS to build custom applications for the Salesforce1 mobile app.

bootstrapangularjsvisualforce
The problem
Security Researcher
Vulnerability
Code Patch Distribution Package
Public Disclosure
OS Base Image Java Base Image Application Image
Python Base Image Application Image
Application Image
Application ImageRuby Base Image
MANUAL
Our Solution
How do you automatically keep all of these images up-to-date?
Create Pull Request to every child image
Developer review and merge
Our Solution
We run tests for our pull requests
Pull request pipeline
Path to production
Our Solution: Dockerfile Image Update
Command line tool invoked as Docker container
# dockerfile-image-update parent <PARENT-IMG> <VERSION-TAG> <IMG_TAG_STORE-GIT-REPO>
Command Line
● PARENT-IMG - Base image whose children we want to update
● VERSION-TAG - Docker tag that we intend children to be updated to
● IMG_TAG_STORE-GIT-REPO - Git repository where you want to persist intended outcome

Recommended for you

Fun with Jenkins & Salesforce
Fun with Jenkins & SalesforceFun with Jenkins & Salesforce
Fun with Jenkins & Salesforce

This document discusses automating Salesforce development workflows using Jenkins and Git. It provides an overview of Jenkins and the Force.com Migration Tool for versioning Salesforce metadata. The document proposes using these tools to improve upon manual folder backups by allowing for collaboration, change logging, and automation. It then demonstrates a sample nightly Jenkins job that checks out metadata from Git, downloads the latest from Salesforce using the Migration Tool, and commits the changes back to the Git repository. Code reviews can then be facilitated through the online Git hosting.

jenkinsantmetadata
Resume_Lakshmi Chaitanya_Technical Specialist_Thirdware Solutions
Resume_Lakshmi Chaitanya_Technical Specialist_Thirdware SolutionsResume_Lakshmi Chaitanya_Technical Specialist_Thirdware Solutions
Resume_Lakshmi Chaitanya_Technical Specialist_Thirdware Solutions

Lakshmi Chaitanya Arikela has over 4 years of experience as a Technical Specialist developing and implementing ERP systems using Progress 4GL. She currently works as a Technical Lead for Visteon Corporation, where she is responsible for requirement gathering, development, testing, and delivering projects like Business Access Control on time and within budget. Prior to this, she has worked on projects for clients such as Rockwell Automation and Thermasys Corporation developing modules for their MFG/PRO systems.

Best Practices for Successful Deployment
Best Practices for Successful DeploymentBest Practices for Successful Deployment
Best Practices for Successful Deployment

Even the most successful projects can be derailed by a poor deployment. Join us as we discuss the plans, tools, and strategies that are critical to a successful deployment. We'll also review common mistakes that administrators, developers, and project managers make that can doom a deployment before it's even begun. We'll demonstrate deployment with both point and click tools such as Change Sets, as well as developer tools like Eclipse and Ant.

salesforce developersdevzonesalesforce.com
Our Solution: Dockerfile Image Update
Command line tool invoked as Docker container
# dockerfile-image-update parent <PARENT-IMG> <VERSION-TAG> <IMG_TAG_STORE-GIT-REPO>
Command Line
● PARENT-IMG - Base image whose children we want to update
● VERSION-TAG - Docker tag that we intend children to be updated to
● IMG_TAG_STORE-GIT-REPO - Git repository where you want to persist intended outcome
Our Solution: Dockerfile Image Update
Command line tool invoked as Docker container
# dockerfile-image-update parent centos_jdk 8 version-persistence-repo
Command Line
Example:
We open sourced it: https://github.com/salesforce/dockerfile-image-update
Our Solution
Why do we need to track image versions?
# dockerfile-image-update all <IMG_TAG_STORE-GIT-REPO>
Command Line
● Scans all images in IMG_TAG_STORE and updates child images
● Run nightly for all images
○ Ensures no one bypassed CI system
○ Developer race conditions
○ Github can’t fork a fork
Our Solution
Why do we need to track image versions?
# dockerfile-image-update all <IMG_TAG_STORE-GIT-REPO>
Command Line
● Scans all images in IMG_TAG_STORE and updates child images
● Run nightly for all images
○ Ensures no one bypassed CI system
○ Developer race conditions
○ Github can’t fork a fork

Recommended for you

Continuous Integration - Software development lifecycle for Force.com projects
Continuous Integration - Software development lifecycle for Force.com projectsContinuous Integration - Software development lifecycle for Force.com projects
Continuous Integration - Software development lifecycle for Force.com projects

Continuous integration refers to the practice of frequently integrating and testing code, rather than waiting until the end of a project or development cycle. The practice of continuous integration is a well established best practice that has been used with software development across multiple platforms and languages. Implementing an automated continuous integration system usually involves a source code repository, used to store the code during team development, and a continuous integration tool that polls the repository for changes and automatically builds and deploys the code in a sandbox.

salesforcecontinuous integrationforce.com
Automating the Impossible: End to End Team Development for ISVs (October 14, ...
Automating the Impossible: End to End Team Development for ISVs (October 14, ...Automating the Impossible: End to End Team Development for ISVs (October 14, ...
Automating the Impossible: End to End Team Development for ISVs (October 14, ...

This document discusses automating the development process for managed packages on the Salesforce platform. It describes how the Nonprofit Starter Pack team uses automation tools like GitHub, Jenkins, CumulusCI and Ant to implement version control, continuous integration, and frequent releases. Key benefits of this approach include improved team productivity, reduced errors, and savings of over 4,500 development hours per year. Local unmanaged packages allow development entirely in metadata and help address challenges of developing managed packages in unmanaged orgs.

Team Development on Force.com with Github and Ant
Team Development on Force.com with Github and AntTeam Development on Force.com with Github and Ant
Team Development on Force.com with Github and Ant

The document discusses using source control and automation tools like GitHub and Ant to support team development on the Force.com platform. It covers topics like org topologies for different team structures, using Git for source control management across multiple developers and orgs, and automating deployments between orgs using the Force.com Migration Tool triggered by pushes to a GitHub repository. The presentation provides an overview of these tools and techniques and includes demonstrations of integrating a Force.com project with GitHub and automating deployments.

Software that writes code
The Result
The Result
I had an uninterrupted vacation in Florida
The Result
● Hundreds of docker images are patched using this tool
● Hundreds of developers migrated services to major OS and language versions safely
In all seriousness...
Future Improvements
● Users and Contributors Welcome!
○ https://github.com/salesforce/dockerfile-image-update
● Feature wishlist:
○ Auto-merge option
○ Maven spotify docker plugin support
○ Update versions in docker-compose and kubernetes pod.yaml
○ Expand the tool to other packaging formats beyond just Docker
What we can do better

Recommended for you

Scaling Continuous Integration for Puppet
Scaling Continuous Integration for PuppetScaling Continuous Integration for Puppet
Scaling Continuous Integration for Puppet

Talk given by Alan Vaghti, SMTS, Software Engineering at Salesforce, at San Francisco Puppet User Group meetup.com event How Salesforce uses r10k, Jenkins, Vagrant, Rouster, GitHub and other tools to support multiple teams doing parallel Puppet development.

puppetengineeringsoftware engineering
Build Customer Centric Applications Using the Salesforce Toolkits for .NET
Build Customer Centric Applications Using the Salesforce Toolkits for .NETBuild Customer Centric Applications Using the Salesforce Toolkits for .NET
Build Customer Centric Applications Using the Salesforce Toolkits for .NET

This document provides an overview and agenda for a webinar on building customer applications using the Salesforce Toolkits for .NET. It includes a safe harbor statement, introduces the speakers, and outlines the agenda which covers what the toolkits are, why they were built, design principles, the engineering process, sample applications and accelerators, and demonstrations of using the toolkits for ASP.NET, Windows Phone, integrating with Apex controllers and more. Resources and next steps are also provided.

Max Yekaterinenko - Magento 2 & Quality
Max Yekaterinenko - Magento 2 & QualityMax Yekaterinenko - Magento 2 & Quality
Max Yekaterinenko - Magento 2 & Quality

One of the 6 main goals behind Magento 2.0 release are the new Quality and Testing features provided out of the box into this new major release. During this talk it will go over these new features and explain how to integrate these very usefull functionalities into new Magento modules to provide high quality modules. Also it will discuss some internal Magento Core team practices and tools which are used to produce an highly tested product and to provide a high quality software for your business.

meet magento italymagento2mm16it
Future Improvements
● Users and Contributors Welcome!
○ https://github.com/salesforce/dockerfile-image-update
● Feature wishlist:
○ Auto-merge option
○ Maven spotify docker plugin support
○ Update versions in docker-compose and kubernetes pod.yaml
○ Expand the tool to other packaging formats beyond just Docker
What we can do better
Future Improvements
● Users and Contributors Welcome!
○ https://github.com/salesforce/dockerfile-image-update
● Feature wishlist:
○ Auto-merge option
○ Maven spotify docker plugin support
○ Update versions in docker-compose and kubernetes pod.yaml
○ Expand the tool to other packaging formats beyond just Docker
What we can do better
Future Improvements
● Users and Contributors Welcome!
○ https://github.com/salesforce/dockerfile-image-update
● Feature wishlist:
○ Auto-merge option
○ Maven spotify docker plugin support
○ Update versions in docker-compose and kubernetes pod.yaml
○ Expand the tool to other packaging formats beyond just Docker
What we can do better
Thank you!
Wouldn’t be possible without these Engineers
● Former Salesforce intern wrote initial version
○ Min Ho Park
● Helped with design, fixes, and production support
○ Justin Harringa
○ Nelson Wolf
○ Jinesh Doshi

Recommended for you

Resume_Arindom-March-3rd
Resume_Arindom-March-3rdResume_Arindom-March-3rd
Resume_Arindom-March-3rd

This document provides a summary of Arindom Kumar Biswas's professional experience and qualifications. It summarizes that he has over 7 years of experience working as a Project Lead and Technical Lead on Mainframe projects for insurance companies like Cognizant Technology Solutions and MetLife. It also lists his technical skills which include languages like COBOL, JCL, and databases like VSAM, DB2. Finally, it provides details of some of the projects he has worked on, including conversions from legacy to new platforms and product launches.

Manage Org Changes Using the Force.com Migration Tool and Git
Manage Org Changes Using the Force.com Migration Tool and GitManage Org Changes Using the Force.com Migration Tool and Git
Manage Org Changes Using the Force.com Migration Tool and Git

Join us to learn how the Force.com Migration Tool is a powerful instrument for deploying code and configuring salesfoce.com. The Ant-based tool offers the ability to take a snapshot of your code and configuration, which you can then store in any source code management system such as Git. These snapshots can be used to restore, in part or in whole, your org to a previous state. In addition to recovery, if we stack these snapshots we can use them for forensic purposes to find when a Salesforce environment changed.

developer forcedeveloperdf13
Building End To End Lightning Apps - Dreamforce 2014
Building End To End Lightning Apps - Dreamforce 2014Building End To End Lightning Apps - Dreamforce 2014
Building End To End Lightning Apps - Dreamforce 2014

Salesforce launched Lightning Component Framework. In this talk I go over "what" are components, "why" components before I jump into "how" to use components (the mechanics). I also talk about Google's Polymer, Facebook's ReactJS all going in this direction for a reason. Components are the future.

reactjslightningflight.js
https://github.com/salesforce/dockerfile-image-update

More Related Content

What's hot

Teams progress presenation
Teams progress presenationTeams progress presenation
Teams progress presenation
Oleg Seriaga
 
IBM Rational Rhapsody support for Microsoft Visual Studio 2015
IBM Rational Rhapsody support for Microsoft Visual Studio 2015IBM Rational Rhapsody support for Microsoft Visual Studio 2015
IBM Rational Rhapsody support for Microsoft Visual Studio 2015
Frank Braun
 
Salesforce.com API Series: Service Cloud Console Deep Dive
Salesforce.com API Series: Service Cloud Console Deep DiveSalesforce.com API Series: Service Cloud Console Deep Dive
Salesforce.com API Series: Service Cloud Console Deep Dive
Salesforce Developers
 
Salesforce Winter 14 Release - Summary
Salesforce Winter 14 Release  - Summary Salesforce Winter 14 Release  - Summary
Salesforce Winter 14 Release - Summary
Roy Gilad
 
Summer '13 Developer Preview Webinar
Summer '13 Developer Preview WebinarSummer '13 Developer Preview Webinar
Summer '13 Developer Preview Webinar
Salesforce Developers
 
AngularJS App In Two Weeks
AngularJS App In Two WeeksAngularJS App In Two Weeks
AngularJS App In Two Weeks
Peter Chittum
 
Fun with Jenkins & Salesforce
Fun with Jenkins & SalesforceFun with Jenkins & Salesforce
Fun with Jenkins & Salesforce
Abhinav Gupta
 
Resume_Lakshmi Chaitanya_Technical Specialist_Thirdware Solutions
Resume_Lakshmi Chaitanya_Technical Specialist_Thirdware SolutionsResume_Lakshmi Chaitanya_Technical Specialist_Thirdware Solutions
Resume_Lakshmi Chaitanya_Technical Specialist_Thirdware Solutions
Lakshmi Chaitanya Arikela
 
Best Practices for Successful Deployment
Best Practices for Successful DeploymentBest Practices for Successful Deployment
Best Practices for Successful Deployment
Salesforce Developers
 
Continuous Integration - Software development lifecycle for Force.com projects
Continuous Integration - Software development lifecycle for Force.com projectsContinuous Integration - Software development lifecycle for Force.com projects
Continuous Integration - Software development lifecycle for Force.com projects
Aldo Fernandez
 
Automating the Impossible: End to End Team Development for ISVs (October 14, ...
Automating the Impossible: End to End Team Development for ISVs (October 14, ...Automating the Impossible: End to End Team Development for ISVs (October 14, ...
Automating the Impossible: End to End Team Development for ISVs (October 14, ...
Salesforce Partners
 
Team Development on Force.com with Github and Ant
Team Development on Force.com with Github and AntTeam Development on Force.com with Github and Ant
Team Development on Force.com with Github and Ant
Salesforce Developers
 
Scaling Continuous Integration for Puppet
Scaling Continuous Integration for PuppetScaling Continuous Integration for Puppet
Scaling Continuous Integration for Puppet
Salesforce Engineering
 
Build Customer Centric Applications Using the Salesforce Toolkits for .NET
Build Customer Centric Applications Using the Salesforce Toolkits for .NETBuild Customer Centric Applications Using the Salesforce Toolkits for .NET
Build Customer Centric Applications Using the Salesforce Toolkits for .NET
Salesforce Developers
 
Max Yekaterinenko - Magento 2 & Quality
Max Yekaterinenko - Magento 2 & QualityMax Yekaterinenko - Magento 2 & Quality
Max Yekaterinenko - Magento 2 & Quality
Meet Magento Italy
 
Resume_Arindom-March-3rd
Resume_Arindom-March-3rdResume_Arindom-March-3rd
Resume_Arindom-March-3rd
Arindom Biswas
 
Manage Org Changes Using the Force.com Migration Tool and Git
Manage Org Changes Using the Force.com Migration Tool and GitManage Org Changes Using the Force.com Migration Tool and Git
Manage Org Changes Using the Force.com Migration Tool and Git
Salesforce Developers
 
Building End To End Lightning Apps - Dreamforce 2014
Building End To End Lightning Apps - Dreamforce 2014Building End To End Lightning Apps - Dreamforce 2014
Building End To End Lightning Apps - Dreamforce 2014
Raja Rao DV
 
Resume - Varghese John
Resume - Varghese JohnResume - Varghese John
Resume - Varghese John
Varghese John
 
Techniques and Tools to Improve the Salesforce Development Cycle
Techniques and Tools to Improve the Salesforce Development CycleTechniques and Tools to Improve the Salesforce Development Cycle
Techniques and Tools to Improve the Salesforce Development Cycle
Salesforce Developers
 

What's hot (20)

Teams progress presenation
Teams progress presenationTeams progress presenation
Teams progress presenation
 
IBM Rational Rhapsody support for Microsoft Visual Studio 2015
IBM Rational Rhapsody support for Microsoft Visual Studio 2015IBM Rational Rhapsody support for Microsoft Visual Studio 2015
IBM Rational Rhapsody support for Microsoft Visual Studio 2015
 
Salesforce.com API Series: Service Cloud Console Deep Dive
Salesforce.com API Series: Service Cloud Console Deep DiveSalesforce.com API Series: Service Cloud Console Deep Dive
Salesforce.com API Series: Service Cloud Console Deep Dive
 
Salesforce Winter 14 Release - Summary
Salesforce Winter 14 Release  - Summary Salesforce Winter 14 Release  - Summary
Salesforce Winter 14 Release - Summary
 
Summer '13 Developer Preview Webinar
Summer '13 Developer Preview WebinarSummer '13 Developer Preview Webinar
Summer '13 Developer Preview Webinar
 
AngularJS App In Two Weeks
AngularJS App In Two WeeksAngularJS App In Two Weeks
AngularJS App In Two Weeks
 
Fun with Jenkins & Salesforce
Fun with Jenkins & SalesforceFun with Jenkins & Salesforce
Fun with Jenkins & Salesforce
 
Resume_Lakshmi Chaitanya_Technical Specialist_Thirdware Solutions
Resume_Lakshmi Chaitanya_Technical Specialist_Thirdware SolutionsResume_Lakshmi Chaitanya_Technical Specialist_Thirdware Solutions
Resume_Lakshmi Chaitanya_Technical Specialist_Thirdware Solutions
 
Best Practices for Successful Deployment
Best Practices for Successful DeploymentBest Practices for Successful Deployment
Best Practices for Successful Deployment
 
Continuous Integration - Software development lifecycle for Force.com projects
Continuous Integration - Software development lifecycle for Force.com projectsContinuous Integration - Software development lifecycle for Force.com projects
Continuous Integration - Software development lifecycle for Force.com projects
 
Automating the Impossible: End to End Team Development for ISVs (October 14, ...
Automating the Impossible: End to End Team Development for ISVs (October 14, ...Automating the Impossible: End to End Team Development for ISVs (October 14, ...
Automating the Impossible: End to End Team Development for ISVs (October 14, ...
 
Team Development on Force.com with Github and Ant
Team Development on Force.com with Github and AntTeam Development on Force.com with Github and Ant
Team Development on Force.com with Github and Ant
 
Scaling Continuous Integration for Puppet
Scaling Continuous Integration for PuppetScaling Continuous Integration for Puppet
Scaling Continuous Integration for Puppet
 
Build Customer Centric Applications Using the Salesforce Toolkits for .NET
Build Customer Centric Applications Using the Salesforce Toolkits for .NETBuild Customer Centric Applications Using the Salesforce Toolkits for .NET
Build Customer Centric Applications Using the Salesforce Toolkits for .NET
 
Max Yekaterinenko - Magento 2 & Quality
Max Yekaterinenko - Magento 2 & QualityMax Yekaterinenko - Magento 2 & Quality
Max Yekaterinenko - Magento 2 & Quality
 
Resume_Arindom-March-3rd
Resume_Arindom-March-3rdResume_Arindom-March-3rd
Resume_Arindom-March-3rd
 
Manage Org Changes Using the Force.com Migration Tool and Git
Manage Org Changes Using the Force.com Migration Tool and GitManage Org Changes Using the Force.com Migration Tool and Git
Manage Org Changes Using the Force.com Migration Tool and Git
 
Building End To End Lightning Apps - Dreamforce 2014
Building End To End Lightning Apps - Dreamforce 2014Building End To End Lightning Apps - Dreamforce 2014
Building End To End Lightning Apps - Dreamforce 2014
 
Resume - Varghese John
Resume - Varghese JohnResume - Varghese John
Resume - Varghese John
 
Techniques and Tools to Improve the Salesforce Development Cycle
Techniques and Tools to Improve the Salesforce Development CycleTechniques and Tools to Improve the Salesforce Development Cycle
Techniques and Tools to Improve the Salesforce Development Cycle
 

Similar to Srecon18americas lightning talk: Auto-Cascading Security Updates Through Docker Images

Heroku Introduction: Scaling customer facing apps & services
Heroku Introduction: Scaling customer facing apps & servicesHeroku Introduction: Scaling customer facing apps & services
Heroku Introduction: Scaling customer facing apps & services
John Stevenson
 
Sandboxes: The Future of App Development by Evan Barnet & Pam Barnet
Sandboxes: The Future of App Development by Evan Barnet & Pam BarnetSandboxes: The Future of App Development by Evan Barnet & Pam Barnet
Sandboxes: The Future of App Development by Evan Barnet & Pam Barnet
Salesforce Admins
 
TDX19 - Accelerate DevOps with GitLab and Salesforce
TDX19 - Accelerate DevOps with GitLab and SalesforceTDX19 - Accelerate DevOps with GitLab and Salesforce
TDX19 - Accelerate DevOps with GitLab and Salesforce
Doug Ayers
 
Using Python on Heroku and Force.com Canvas to Enhance Salesforce.com
Using Python on Heroku and Force.com Canvas to Enhance Salesforce.comUsing Python on Heroku and Force.com Canvas to Enhance Salesforce.com
Using Python on Heroku and Force.com Canvas to Enhance Salesforce.com
Salesforce Developers
 
Simplify your code with Salesforce DX and module development
Simplify your code with Salesforce DX and module developmentSimplify your code with Salesforce DX and module development
Simplify your code with Salesforce DX and module development
Salesforce Developers
 
Modern App Dev: Modular Development Strategies
Modern App Dev: Modular Development StrategiesModern App Dev: Modular Development Strategies
Modern App Dev: Modular Development Strategies
Salesforce Developers
 
Introduction to Heroku - CCT London 2013
Introduction to Heroku - CCT London 2013Introduction to Heroku - CCT London 2013
Introduction to Heroku - CCT London 2013
John Stevenson
 
Lightning Web Components - A new era, René Winkelmeyer
Lightning Web Components - A new era, René WinkelmeyerLightning Web Components - A new era, René Winkelmeyer
Lightning Web Components - A new era, René Winkelmeyer
CzechDreamin
 
Reusable Build Scripts for Managed Package Development (October 14, 2014)
Reusable Build Scripts for Managed Package Development (October 14, 2014)Reusable Build Scripts for Managed Package Development (October 14, 2014)
Reusable Build Scripts for Managed Package Development (October 14, 2014)
Salesforce Partners
 
#Df17 Recap Series Build Apps Faster with the Salesforce Platform
#Df17 Recap Series Build Apps Faster with the Salesforce Platform #Df17 Recap Series Build Apps Faster with the Salesforce Platform
#Df17 Recap Series Build Apps Faster with the Salesforce Platform
Salesforce Developers
 
Salesforce DX Pilot Product Overview
Salesforce DX Pilot Product OverviewSalesforce DX Pilot Product Overview
Salesforce DX Pilot Product Overview
Salesforce Partners
 
San Francisco Jenkins Area Meetup October 2016: Self-service secure test and ...
San Francisco Jenkins Area Meetup October 2016: Self-service secure test and ...San Francisco Jenkins Area Meetup October 2016: Self-service secure test and ...
San Francisco Jenkins Area Meetup October 2016: Self-service secure test and ...
Andrey Falko
 
Developer Preview Live – Release Readiness LIVE, Spring '18
Developer Preview Live – Release Readiness LIVE, Spring '18Developer Preview Live – Release Readiness LIVE, Spring '18
Developer Preview Live – Release Readiness LIVE, Spring '18
Salesforce Developers
 
Introduction to Heroku
Introduction to HerokuIntroduction to Heroku
Introduction to Heroku
Salesforce Developers
 
Spring '14 Release Developer Preview Webinar
Spring '14 Release Developer Preview WebinarSpring '14 Release Developer Preview Webinar
Spring '14 Release Developer Preview Webinar
Salesforce Developers
 
Dreamforce 13 developer session: Introduction to Heroku
Dreamforce 13 developer session: Introduction to HerokuDreamforce 13 developer session: Introduction to Heroku
Dreamforce 13 developer session: Introduction to Heroku
John Stevenson
 
Hands-on Workshop: Intermediate Development with Heroku and Force.com
Hands-on Workshop: Intermediate Development with Heroku and Force.comHands-on Workshop: Intermediate Development with Heroku and Force.com
Hands-on Workshop: Intermediate Development with Heroku and Force.com
Salesforce Developers
 
Lightning Developer Experience, Eclipse IDE Evolved
Lightning Developer Experience, Eclipse IDE EvolvedLightning Developer Experience, Eclipse IDE Evolved
Lightning Developer Experience, Eclipse IDE Evolved
Salesforce Developers
 
Packaging It Up Latest Enhancements for App Distribution
Packaging It Up Latest Enhancements for App DistributionPackaging It Up Latest Enhancements for App Distribution
Packaging It Up Latest Enhancements for App Distribution
dreamforce2006
 
TrailheaDX and Summer '19: Developer Highlights
TrailheaDX and Summer '19: Developer HighlightsTrailheaDX and Summer '19: Developer Highlights
TrailheaDX and Summer '19: Developer Highlights
Salesforce Developers
 

Similar to Srecon18americas lightning talk: Auto-Cascading Security Updates Through Docker Images (20)

Heroku Introduction: Scaling customer facing apps & services
Heroku Introduction: Scaling customer facing apps & servicesHeroku Introduction: Scaling customer facing apps & services
Heroku Introduction: Scaling customer facing apps & services
 
Sandboxes: The Future of App Development by Evan Barnet & Pam Barnet
Sandboxes: The Future of App Development by Evan Barnet & Pam BarnetSandboxes: The Future of App Development by Evan Barnet & Pam Barnet
Sandboxes: The Future of App Development by Evan Barnet & Pam Barnet
 
TDX19 - Accelerate DevOps with GitLab and Salesforce
TDX19 - Accelerate DevOps with GitLab and SalesforceTDX19 - Accelerate DevOps with GitLab and Salesforce
TDX19 - Accelerate DevOps with GitLab and Salesforce
 
Using Python on Heroku and Force.com Canvas to Enhance Salesforce.com
Using Python on Heroku and Force.com Canvas to Enhance Salesforce.comUsing Python on Heroku and Force.com Canvas to Enhance Salesforce.com
Using Python on Heroku and Force.com Canvas to Enhance Salesforce.com
 
Simplify your code with Salesforce DX and module development
Simplify your code with Salesforce DX and module developmentSimplify your code with Salesforce DX and module development
Simplify your code with Salesforce DX and module development
 
Modern App Dev: Modular Development Strategies
Modern App Dev: Modular Development StrategiesModern App Dev: Modular Development Strategies
Modern App Dev: Modular Development Strategies
 
Introduction to Heroku - CCT London 2013
Introduction to Heroku - CCT London 2013Introduction to Heroku - CCT London 2013
Introduction to Heroku - CCT London 2013
 
Lightning Web Components - A new era, René Winkelmeyer
Lightning Web Components - A new era, René WinkelmeyerLightning Web Components - A new era, René Winkelmeyer
Lightning Web Components - A new era, René Winkelmeyer
 
Reusable Build Scripts for Managed Package Development (October 14, 2014)
Reusable Build Scripts for Managed Package Development (October 14, 2014)Reusable Build Scripts for Managed Package Development (October 14, 2014)
Reusable Build Scripts for Managed Package Development (October 14, 2014)
 
#Df17 Recap Series Build Apps Faster with the Salesforce Platform
#Df17 Recap Series Build Apps Faster with the Salesforce Platform #Df17 Recap Series Build Apps Faster with the Salesforce Platform
#Df17 Recap Series Build Apps Faster with the Salesforce Platform
 
Salesforce DX Pilot Product Overview
Salesforce DX Pilot Product OverviewSalesforce DX Pilot Product Overview
Salesforce DX Pilot Product Overview
 
San Francisco Jenkins Area Meetup October 2016: Self-service secure test and ...
San Francisco Jenkins Area Meetup October 2016: Self-service secure test and ...San Francisco Jenkins Area Meetup October 2016: Self-service secure test and ...
San Francisco Jenkins Area Meetup October 2016: Self-service secure test and ...
 
Developer Preview Live – Release Readiness LIVE, Spring '18
Developer Preview Live – Release Readiness LIVE, Spring '18Developer Preview Live – Release Readiness LIVE, Spring '18
Developer Preview Live – Release Readiness LIVE, Spring '18
 
Introduction to Heroku
Introduction to HerokuIntroduction to Heroku
Introduction to Heroku
 
Spring '14 Release Developer Preview Webinar
Spring '14 Release Developer Preview WebinarSpring '14 Release Developer Preview Webinar
Spring '14 Release Developer Preview Webinar
 
Dreamforce 13 developer session: Introduction to Heroku
Dreamforce 13 developer session: Introduction to HerokuDreamforce 13 developer session: Introduction to Heroku
Dreamforce 13 developer session: Introduction to Heroku
 
Hands-on Workshop: Intermediate Development with Heroku and Force.com
Hands-on Workshop: Intermediate Development with Heroku and Force.comHands-on Workshop: Intermediate Development with Heroku and Force.com
Hands-on Workshop: Intermediate Development with Heroku and Force.com
 
Lightning Developer Experience, Eclipse IDE Evolved
Lightning Developer Experience, Eclipse IDE EvolvedLightning Developer Experience, Eclipse IDE Evolved
Lightning Developer Experience, Eclipse IDE Evolved
 
Packaging It Up Latest Enhancements for App Distribution
Packaging It Up Latest Enhancements for App DistributionPackaging It Up Latest Enhancements for App Distribution
Packaging It Up Latest Enhancements for App Distribution
 
TrailheaDX and Summer '19: Developer Highlights
TrailheaDX and Summer '19: Developer HighlightsTrailheaDX and Summer '19: Developer Highlights
TrailheaDX and Summer '19: Developer Highlights
 

Recently uploaded

dachnug51 - HCL Sametime 12 as a Software Appliance.pdf
dachnug51 - HCL Sametime 12 as a Software Appliance.pdfdachnug51 - HCL Sametime 12 as a Software Appliance.pdf
dachnug51 - HCL Sametime 12 as a Software Appliance.pdf
DNUG e.V.
 
Development of Chatbot Using AI\ML Technologies
Development of Chatbot Using AI\ML TechnologiesDevelopment of Chatbot Using AI\ML Technologies
Development of Chatbot Using AI\ML Technologies
MaisnamLuwangPibarel
 
Abortion pills in Fujairah *((+971588192166*)☎️)¥) **Effective Abortion Pills...
Abortion pills in Fujairah *((+971588192166*)☎️)¥) **Effective Abortion Pills...Abortion pills in Fujairah *((+971588192166*)☎️)¥) **Effective Abortion Pills...
Abortion pills in Fujairah *((+971588192166*)☎️)¥) **Effective Abortion Pills...
Medical / Health Care (+971588192166) Mifepristone and Misoprostol tablets 200mg
 
Google ML-Kit - Understanding on-device machine learning
Google ML-Kit - Understanding on-device machine learningGoogle ML-Kit - Understanding on-device machine learning
Google ML-Kit - Understanding on-device machine learning
VishrutGoyani1
 
Break data silos with real-time connectivity using Confluent Cloud Connectors
Break data silos with real-time connectivity using Confluent Cloud ConnectorsBreak data silos with real-time connectivity using Confluent Cloud Connectors
Break data silos with real-time connectivity using Confluent Cloud Connectors
confluent
 
WEBINAR SLIDES: CCX for Cloud Service Providers
WEBINAR SLIDES: CCX for Cloud Service ProvidersWEBINAR SLIDES: CCX for Cloud Service Providers
WEBINAR SLIDES: CCX for Cloud Service Providers
Severalnines
 
Addressing the Top 9 User Pain Points with Visual Design Elements.pptx
Addressing the Top 9 User Pain Points with Visual Design Elements.pptxAddressing the Top 9 User Pain Points with Visual Design Elements.pptx
Addressing the Top 9 User Pain Points with Visual Design Elements.pptx
Sparity1
 
AWS Cloud Practitioner Essentials (Second Edition) (Arabic) Course Introducti...
AWS Cloud Practitioner Essentials (Second Edition) (Arabic) Course Introducti...AWS Cloud Practitioner Essentials (Second Edition) (Arabic) Course Introducti...
AWS Cloud Practitioner Essentials (Second Edition) (Arabic) Course Introducti...
karim wahed
 
一比一原版英国牛津大学毕业证(oxon毕业证书)如何办理
一比一原版英国牛津大学毕业证(oxon毕业证书)如何办理一比一原版英国牛津大学毕业证(oxon毕业证书)如何办理
一比一原版英国牛津大学毕业证(oxon毕业证书)如何办理
avufu
 
Prada Group Reports Strong Growth in First Quarter …
Prada Group Reports Strong Growth in First Quarter …Prada Group Reports Strong Growth in First Quarter …
Prada Group Reports Strong Growth in First Quarter …
908dutch
 
Shivam Pandit working on Php Web Developer.
Shivam Pandit working on Php Web Developer.Shivam Pandit working on Php Web Developer.
Shivam Pandit working on Php Web Developer.
shivamt017
 
React Native vs Flutter - SSTech System
React Native vs Flutter  - SSTech SystemReact Native vs Flutter  - SSTech System
React Native vs Flutter - SSTech System
SSTech System
 
WhatsApp Tracker - Tracking WhatsApp to Boost Online Safety.pdf
WhatsApp Tracker -  Tracking WhatsApp to Boost Online Safety.pdfWhatsApp Tracker -  Tracking WhatsApp to Boost Online Safety.pdf
WhatsApp Tracker - Tracking WhatsApp to Boost Online Safety.pdf
onemonitarsoftware
 
Wired_2.0_Create_AmsterdamJUG_09072024.pptx
Wired_2.0_Create_AmsterdamJUG_09072024.pptxWired_2.0_Create_AmsterdamJUG_09072024.pptx
Wired_2.0_Create_AmsterdamJUG_09072024.pptx
SimonedeGijt
 
NYC 26-Jun-2024 Combined Presentations.pdf
NYC 26-Jun-2024 Combined Presentations.pdfNYC 26-Jun-2024 Combined Presentations.pdf
NYC 26-Jun-2024 Combined Presentations.pdf
AUGNYC
 
Overview of ERP - Mechlin Technologies.pptx
Overview of ERP - Mechlin Technologies.pptxOverview of ERP - Mechlin Technologies.pptx
Overview of ERP - Mechlin Technologies.pptx
Mitchell Marsh
 
Software development... for all? (keynote at ICSOFT'2024)
Software development... for all? (keynote at ICSOFT'2024)Software development... for all? (keynote at ICSOFT'2024)
Software development... for all? (keynote at ICSOFT'2024)
miso_uam
 
Top 10 Tips To Get Google AdSense For Your Website
Top 10 Tips To Get Google AdSense For Your WebsiteTop 10 Tips To Get Google AdSense For Your Website
Top 10 Tips To Get Google AdSense For Your Website
e-Definers Technology
 
MVP Mobile Application - Codearrest.pptx
MVP Mobile Application - Codearrest.pptxMVP Mobile Application - Codearrest.pptx
MVP Mobile Application - Codearrest.pptx
Mitchell Marsh
 
Safe Work Permit Management Software for Hot Work Permits
Safe Work Permit Management Software for Hot Work PermitsSafe Work Permit Management Software for Hot Work Permits
Safe Work Permit Management Software for Hot Work Permits
sheqnetworkmarketing
 

Recently uploaded (20)

dachnug51 - HCL Sametime 12 as a Software Appliance.pdf
dachnug51 - HCL Sametime 12 as a Software Appliance.pdfdachnug51 - HCL Sametime 12 as a Software Appliance.pdf
dachnug51 - HCL Sametime 12 as a Software Appliance.pdf
 
Development of Chatbot Using AI\ML Technologies
Development of Chatbot Using AI\ML TechnologiesDevelopment of Chatbot Using AI\ML Technologies
Development of Chatbot Using AI\ML Technologies
 
Abortion pills in Fujairah *((+971588192166*)☎️)¥) **Effective Abortion Pills...
Abortion pills in Fujairah *((+971588192166*)☎️)¥) **Effective Abortion Pills...Abortion pills in Fujairah *((+971588192166*)☎️)¥) **Effective Abortion Pills...
Abortion pills in Fujairah *((+971588192166*)☎️)¥) **Effective Abortion Pills...
 
Google ML-Kit - Understanding on-device machine learning
Google ML-Kit - Understanding on-device machine learningGoogle ML-Kit - Understanding on-device machine learning
Google ML-Kit - Understanding on-device machine learning
 
Break data silos with real-time connectivity using Confluent Cloud Connectors
Break data silos with real-time connectivity using Confluent Cloud ConnectorsBreak data silos with real-time connectivity using Confluent Cloud Connectors
Break data silos with real-time connectivity using Confluent Cloud Connectors
 
WEBINAR SLIDES: CCX for Cloud Service Providers
WEBINAR SLIDES: CCX for Cloud Service ProvidersWEBINAR SLIDES: CCX for Cloud Service Providers
WEBINAR SLIDES: CCX for Cloud Service Providers
 
Addressing the Top 9 User Pain Points with Visual Design Elements.pptx
Addressing the Top 9 User Pain Points with Visual Design Elements.pptxAddressing the Top 9 User Pain Points with Visual Design Elements.pptx
Addressing the Top 9 User Pain Points with Visual Design Elements.pptx
 
AWS Cloud Practitioner Essentials (Second Edition) (Arabic) Course Introducti...
AWS Cloud Practitioner Essentials (Second Edition) (Arabic) Course Introducti...AWS Cloud Practitioner Essentials (Second Edition) (Arabic) Course Introducti...
AWS Cloud Practitioner Essentials (Second Edition) (Arabic) Course Introducti...
 
一比一原版英国牛津大学毕业证(oxon毕业证书)如何办理
一比一原版英国牛津大学毕业证(oxon毕业证书)如何办理一比一原版英国牛津大学毕业证(oxon毕业证书)如何办理
一比一原版英国牛津大学毕业证(oxon毕业证书)如何办理
 
Prada Group Reports Strong Growth in First Quarter …
Prada Group Reports Strong Growth in First Quarter …Prada Group Reports Strong Growth in First Quarter …
Prada Group Reports Strong Growth in First Quarter …
 
Shivam Pandit working on Php Web Developer.
Shivam Pandit working on Php Web Developer.Shivam Pandit working on Php Web Developer.
Shivam Pandit working on Php Web Developer.
 
React Native vs Flutter - SSTech System
React Native vs Flutter  - SSTech SystemReact Native vs Flutter  - SSTech System
React Native vs Flutter - SSTech System
 
WhatsApp Tracker - Tracking WhatsApp to Boost Online Safety.pdf
WhatsApp Tracker -  Tracking WhatsApp to Boost Online Safety.pdfWhatsApp Tracker -  Tracking WhatsApp to Boost Online Safety.pdf
WhatsApp Tracker - Tracking WhatsApp to Boost Online Safety.pdf
 
Wired_2.0_Create_AmsterdamJUG_09072024.pptx
Wired_2.0_Create_AmsterdamJUG_09072024.pptxWired_2.0_Create_AmsterdamJUG_09072024.pptx
Wired_2.0_Create_AmsterdamJUG_09072024.pptx
 
NYC 26-Jun-2024 Combined Presentations.pdf
NYC 26-Jun-2024 Combined Presentations.pdfNYC 26-Jun-2024 Combined Presentations.pdf
NYC 26-Jun-2024 Combined Presentations.pdf
 
Overview of ERP - Mechlin Technologies.pptx
Overview of ERP - Mechlin Technologies.pptxOverview of ERP - Mechlin Technologies.pptx
Overview of ERP - Mechlin Technologies.pptx
 
Software development... for all? (keynote at ICSOFT'2024)
Software development... for all? (keynote at ICSOFT'2024)Software development... for all? (keynote at ICSOFT'2024)
Software development... for all? (keynote at ICSOFT'2024)
 
Top 10 Tips To Get Google AdSense For Your Website
Top 10 Tips To Get Google AdSense For Your WebsiteTop 10 Tips To Get Google AdSense For Your Website
Top 10 Tips To Get Google AdSense For Your Website
 
MVP Mobile Application - Codearrest.pptx
MVP Mobile Application - Codearrest.pptxMVP Mobile Application - Codearrest.pptx
MVP Mobile Application - Codearrest.pptx
 
Safe Work Permit Management Software for Hot Work Permits
Safe Work Permit Management Software for Hot Work PermitsSafe Work Permit Management Software for Hot Work Permits
Safe Work Permit Management Software for Hot Work Permits
 

Srecon18americas lightning talk: Auto-Cascading Security Updates Through Docker Images

  • 1. Auto-Cascading Security Updates Through Docker Images Andrey Falko Salesforce Infrastructure
  • 2. Statement under the Private Securities Litigation Reform Act of 1995: This presentation may contain forward-looking statements that involve risks, uncertainties, and assumptions. If any such uncertainties materialize or if any of the assumptions proves incorrect, the results of salesforce.com, inc. could differ materially from the results expressed or implied by the forward-looking statements we make. All statements other than statements of historical fact could be deemed forward-looking, including any projections of product or service availability, subscriber growth, earnings, revenues, or other financial items and any statements regarding strategies or plans of management for future operations, statements of belief, any statements concerning new, planned, or upgraded services or technology developments and customer contracts or use of our services. The risks and uncertainties referred to above include – but are not limited to – risks associated with developing and delivering new functionality for our service, new products and services, our new business model, our past operating losses, possible fluctuations in our operating results and rate of growth, interruptions or delays in our Web hosting, breach of our security measures, the outcome of any litigation, risks associated with completed and any possible mergers and acquisitions, the immature market in which we operate, our relatively limited operating history, our ability to expand, retain, and motivate our employees and manage our growth, new releases of our service and successful customer deployment, our limited history reselling non-salesforce.com products, and utilization and selling to larger enterprise customers. Further information on potential factors that could affect the financial results of salesforce.com, inc. is included in our annual report on Form 10-K for the most recent fiscal year and in our quarterly report on Form 10-Q for the most recent fiscal quarter. These documents and others containing important disclosures are available on the SEC Filings section of the Investor Information section of our Web site. Any unreleased services or features referenced in this or other presentations, press releases or public statements are not currently available and may not be delivered on time or at all. Customers who purchase our services should make the purchase decisions based upon features that are currently available. Salesforce.com, inc. assumes no obligation and does not intend to update these forward-looking statements. Forward-Looking Statements
  • 3. The problem Security Researcher Vulnerability Code Patch Distribution Package Public Disclosure OS Base Image Java Base Image Application Image Python Base Image Application Image Application Image Application ImageRuby Base Image
  • 4. The problem Security Researcher Vulnerability Code Patch Distribution Package Public Disclosure OS Base Image Java Base Image Application Image Python Base Image Application Image Application Image Application ImageRuby Base Image
  • 5. The problem Security Researcher Vulnerability Code Patch Distribution Package Public Disclosure OS Base Image Java Base Image Application Image Python Base Image Application Image Application Image Application ImageRuby Base Image MANUAL
  • 6. Our Solution How do you automatically keep all of these images up-to-date? Create Pull Request to every child image
  • 7. Developer review and merge Our Solution We run tests for our pull requests Pull request pipeline Path to production
  • 8. Our Solution: Dockerfile Image Update Command line tool invoked as Docker container # dockerfile-image-update parent <PARENT-IMG> <VERSION-TAG> <IMG_TAG_STORE-GIT-REPO> Command Line ● PARENT-IMG - Base image whose children we want to update ● VERSION-TAG - Docker tag that we intend children to be updated to ● IMG_TAG_STORE-GIT-REPO - Git repository where you want to persist intended outcome
  • 9. Our Solution: Dockerfile Image Update Command line tool invoked as Docker container # dockerfile-image-update parent <PARENT-IMG> <VERSION-TAG> <IMG_TAG_STORE-GIT-REPO> Command Line ● PARENT-IMG - Base image whose children we want to update ● VERSION-TAG - Docker tag that we intend children to be updated to ● IMG_TAG_STORE-GIT-REPO - Git repository where you want to persist intended outcome
  • 10. Our Solution: Dockerfile Image Update Command line tool invoked as Docker container # dockerfile-image-update parent centos_jdk 8 version-persistence-repo Command Line Example: We open sourced it: https://github.com/salesforce/dockerfile-image-update
  • 11. Our Solution Why do we need to track image versions? # dockerfile-image-update all <IMG_TAG_STORE-GIT-REPO> Command Line ● Scans all images in IMG_TAG_STORE and updates child images ● Run nightly for all images ○ Ensures no one bypassed CI system ○ Developer race conditions ○ Github can’t fork a fork
  • 12. Our Solution Why do we need to track image versions? # dockerfile-image-update all <IMG_TAG_STORE-GIT-REPO> Command Line ● Scans all images in IMG_TAG_STORE and updates child images ● Run nightly for all images ○ Ensures no one bypassed CI system ○ Developer race conditions ○ Github can’t fork a fork
  • 13. Software that writes code The Result
  • 14. The Result I had an uninterrupted vacation in Florida
  • 15. The Result ● Hundreds of docker images are patched using this tool ● Hundreds of developers migrated services to major OS and language versions safely In all seriousness...
  • 16. Future Improvements ● Users and Contributors Welcome! ○ https://github.com/salesforce/dockerfile-image-update ● Feature wishlist: ○ Auto-merge option ○ Maven spotify docker plugin support ○ Update versions in docker-compose and kubernetes pod.yaml ○ Expand the tool to other packaging formats beyond just Docker What we can do better
  • 17. Future Improvements ● Users and Contributors Welcome! ○ https://github.com/salesforce/dockerfile-image-update ● Feature wishlist: ○ Auto-merge option ○ Maven spotify docker plugin support ○ Update versions in docker-compose and kubernetes pod.yaml ○ Expand the tool to other packaging formats beyond just Docker What we can do better
  • 18. Future Improvements ● Users and Contributors Welcome! ○ https://github.com/salesforce/dockerfile-image-update ● Feature wishlist: ○ Auto-merge option ○ Maven spotify docker plugin support ○ Update versions in docker-compose and kubernetes pod.yaml ○ Expand the tool to other packaging formats beyond just Docker What we can do better
  • 19. Future Improvements ● Users and Contributors Welcome! ○ https://github.com/salesforce/dockerfile-image-update ● Feature wishlist: ○ Auto-merge option ○ Maven spotify docker plugin support ○ Update versions in docker-compose and kubernetes pod.yaml ○ Expand the tool to other packaging formats beyond just Docker What we can do better
  • 20. Thank you! Wouldn’t be possible without these Engineers ● Former Salesforce intern wrote initial version ○ Min Ho Park ● Helped with design, fixes, and production support ○ Justin Harringa ○ Nelson Wolf ○ Jinesh Doshi