{"podcast":{"title":"ISACA Podcast","slug":"isaca-podcast-599091","podcast_index_feed_id":599091,"rss_url":"https://feed.podbean.com/isacapodcast/feed.xml","website_url":"https://isacapodcast.podbean.com","image_url":"https://pbcdn1.podbean.com/imglogo/image-logo/6036265/ISACA_Podcast-cover-art_square.png","author":"ISACA Podcast","episode_count":100,"summary":"The ISACA Podcast gives you insight into the latest regulations, trends and threats experienced by information systems auditors and governance and security professionals. The experts interviewed in the ISACA Podcast have valuable perspectives they have gained from their years of experience in the field. Whether you are beginning your career or have decades of experience, the ISACA Podcast can help you be better equipped to address industry challenges and embrace opportunities.","last_synced_at":"2026-07-21T14:17:56.931871+00:00","page_url":"https://stenobird.com/podcast/isaca-podcast-599091"},"episode":{"title":"Your Containers Are Probably Full of Holes: Fixing Docker Security with AI","slug":"your-containers-are-probably-full-of-holes-fixing-docker-security-with-ai","published_at":"2026-07-21T05:00:00+00:00","page_url":"https://stenobird.com/podcast/isaca-podcast-599091/your-containers-are-probably-full-of-holes-fixing-docker-security-with-ai","show_page_url":"https://stenobird.com/podcast/isaca-podcast-599091","url":"https://isacapodcast.podbean.com/e/your-containers-are-probably-full-of-holes-fixing-docker-security-with-ai/","audio_url":"https://mcdn.podbean.com/mf/web/gyvz4ncwjinmri5x/26_055_ISACA_Podcast_-_Advait_Patel_D19qnef.mp3","summary":"Containers run much of the software we depend on, and many are shipped with security problems that no one noticed. Traditional container scanning tools can miss important vulnerabilities, insecure configurations, embedded secrets, and risky Dockerfile patterns before they reach production. In this episode, ISACA’s Adedayo Ojo, Principal, Emerging Technologies and Professional Practices, Research Development, speaks with Advait Patel, Senior Site Reliability Engineer at Broadcom, Docker Captain, and Google Developer Expert in Google Cloud, about why traditional container scanning misses so much and what it takes to identify the issues that matter most. Advait shares lessons from running containers at scale on a large cloud platform and explains how he built DockSec, an open-source tool that uses AI to identify insecure Dockerfile patterns, embedded secrets, and misconfigurations that signature-based scanners tend to overlook. The conversation offers practical guidance that developers and security teams can apply immediately, along with an honest look at where AI can strengthen container security—and where it cannot. Related Resources & Stay Connected Explore DockSec on GitHub: Review the open-source DockSec project, explore its features, and learn how it uses AI to identify insecure Dockerfile patterns, embedded secrets, and container misconfigurations.https://github.com/OWASP/DockSec Learn More About DockSec from OWASP: Discover more about the DockSec project, its approach to container security, and how it helps developers identify risks that traditional signature-based scanners may miss.https://owasp.org/DockSec/ Connect with Advait Patel on LinkedIn: Follow Advait for insights on container security, cloud infrastructure, site reliability engineering, Docker, and…","meta_description":"Containers run much of the software we depend on, and many are shipped with security problems that no one noticed. Traditional container scanning tools ca…","key_points":[],"chapters":[],"topics":[],"duration_seconds":1689,"processing_state":"not_requested","actions":[{"name":"request_transcript","method":"POST","url":"https://stenobird.com/v1/public/podcasts/isaca-podcast-599091/episodes/your-containers-are-probably-full-of-holes-fixing-docker-security-with-ai/transcription-requests","description":"Idempotently request low-priority transcript generation for this episode."},{"name":"read_markdown","method":"GET","url":"https://stenobird.com/podcast/isaca-podcast-599091/your-containers-are-probably-full-of-holes-fixing-docker-security-with-ai.md","description":"Read the agent-friendly Markdown representation of this episode resource."}]}}