Automate Once, Run Anywhere: The Docker Moment for Security Workflows
Nancy Chauhan & Aseem Shrey, ShipSecAI
Abstract
Most security automations are fragile and tied to a single environment, once you leave a team, they break or vanish. In this talk, we explore how to make security automation portable, reproducible, and Kubernetes-native. Using open, declarative workflow definitions, we built a model where each automation runs as a containerized workload with custom resource specs, security policies, and observability baked in. The result? Automations that can be deployed on any cluster, across teams or organizations, without rewriting code or losing visibility just like containers revolutionized application delivery, this approach aims to do the same for security workflows.
