From ba7574b0f194a167e1e8b9667383d99f3f7ff271 Mon Sep 17 00:00:00 2001
From: nexus-Six <nexus-Six@users.noreply.github.com>
Date: Fri, 3 May 2024 12:42:39 +0000
Subject: [PATCH] deploy:
 devsecops-workshop/workshop-guide@bcc041af5320a2b1bc02b433eb0faafeaf5ed23d

---
 1-intro/index.html                 | 50 ++++++++++++-------------
 10-rhacs-setup/index.html          | 54 +++++++++++++--------------
 11-rhacs-warmup/index.html         | 50 ++++++++++++-------------
 12-create-policy/index.html        | 53 +++++++++++++-------------
 13-rhacs-pipeline/index.html       | 59 ++++++++++++++---------------
 15-runtime-security/index.html     | 50 ++++++++++++-------------
 16-acm/index.html                  | 50 ++++++++++++-------------
 2-install-prerequisites/index.html | 50 ++++++++++++-------------
 2.1-prepare-cluster/index.html     | 50 ++++++++++++-------------
 20-appendix/index.html             | 50 ++++++++++++-------------
 3-inner-loop/index.html            | 60 +++++++++++++++---------------
 4-outer-loop/index.html            | 50 ++++++++++++-------------
 404.html                           | 16 ++++----
 5-gitops/index.html                | 58 ++++++++++++++---------------
 categories/index.html              | 50 ++++++++++++-------------
 index.html                         | 50 ++++++++++++-------------
 index.json                         | 10 ++---
 tags/index.html                    | 50 ++++++++++++-------------
 18 files changed, 431 insertions(+), 429 deletions(-)

diff --git a/1-intro/index.html b/1-intro/index.html
index 28be98f..6eaf2ea 100644
--- a/1-intro/index.html
+++ b/1-intro/index.html
@@ -12,22 +12,22 @@
     <title>The DevSecOps Workshop :: DevSecOps Workshop</title>
 
     
-    <link href="https://devsecops-workshop.github.io/css/nucleus.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/fontawesome-all.min.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/hybrid.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/featherlight.min.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/perfect-scrollbar.min.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/auto-complete.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/atom-one-dark-reasonable.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/theme.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/tabs.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/hugo-theme.css?1714740090" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/nucleus.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/fontawesome-all.min.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/hybrid.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/featherlight.min.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/perfect-scrollbar.min.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/auto-complete.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/atom-one-dark-reasonable.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/theme.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/tabs.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/hugo-theme.css?1714740158" rel="stylesheet">
     
-    <link href="https://devsecops-workshop.github.io/css/theme-red.css?1714740090" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/theme-red.css?1714740158" rel="stylesheet">
     
     
 
-    <script src="https://devsecops-workshop.github.io/js/jquery-3.3.1.min.js?1714740090"></script>
+    <script src="https://devsecops-workshop.github.io/js/jquery-3.3.1.min.js?1714740158"></script>
 
     <style>
       :root #header + #content > #left > #rlblock_left{
@@ -61,14 +61,14 @@
     <span data-search-clear=""><i class="fas fa-times"></i></span>
 </div>
 
-<script type="text/javascript" src="https://devsecops-workshop.github.io/js/lunr.min.js?1714740090"></script>
-<script type="text/javascript" src="https://devsecops-workshop.github.io/js/auto-complete.js?1714740090"></script>
+<script type="text/javascript" src="https://devsecops-workshop.github.io/js/lunr.min.js?1714740158"></script>
+<script type="text/javascript" src="https://devsecops-workshop.github.io/js/auto-complete.js?1714740158"></script>
 <script type="text/javascript">
     
         var baseurl = "https:\/\/devsecops-workshop.github.io\/";
     
 </script>
-<script type="text/javascript" src="https://devsecops-workshop.github.io/js/search.js?1714740090"></script>
+<script type="text/javascript" src="https://devsecops-workshop.github.io/js/search.js?1714740158"></script>
 
     
   </div>
@@ -929,19 +929,19 @@ <h2 id="current-domain-replacement">Current Domain replacement</h2>
     <div style="left: -1000px; overflow: scroll; position: absolute; top: -1000px; border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;">
       <div style="border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;"></div>
     </div>
-    <script src="https://devsecops-workshop.github.io/js/clipboard.min.js?1714740090"></script>
-    <script src="https://devsecops-workshop.github.io/js/perfect-scrollbar.min.js?1714740090"></script>
-    <script src="https://devsecops-workshop.github.io/js/perfect-scrollbar.jquery.min.js?1714740090"></script>
-    <script src="https://devsecops-workshop.github.io/js/jquery.sticky.js?1714740090"></script>
-    <script src="https://devsecops-workshop.github.io/js/featherlight.min.js?1714740090"></script>
-    <script src="https://devsecops-workshop.github.io/js/highlight.pack.js?1714740090"></script>
+    <script src="https://devsecops-workshop.github.io/js/clipboard.min.js?1714740158"></script>
+    <script src="https://devsecops-workshop.github.io/js/perfect-scrollbar.min.js?1714740158"></script>
+    <script src="https://devsecops-workshop.github.io/js/perfect-scrollbar.jquery.min.js?1714740158"></script>
+    <script src="https://devsecops-workshop.github.io/js/jquery.sticky.js?1714740158"></script>
+    <script src="https://devsecops-workshop.github.io/js/featherlight.min.js?1714740158"></script>
+    <script src="https://devsecops-workshop.github.io/js/highlight.pack.js?1714740158"></script>
     <script>hljs.initHighlightingOnLoad();</script>
-    <script src="https://devsecops-workshop.github.io/js/modernizr.custom-3.6.0.js?1714740090"></script>
-    <script src="https://devsecops-workshop.github.io/js/learn.js?1714740090"></script>
-    <script src="https://devsecops-workshop.github.io/js/hugo-learn.js?1714740090"></script>
+    <script src="https://devsecops-workshop.github.io/js/modernizr.custom-3.6.0.js?1714740158"></script>
+    <script src="https://devsecops-workshop.github.io/js/learn.js?1714740158"></script>
+    <script src="https://devsecops-workshop.github.io/js/hugo-learn.js?1714740158"></script>
     
         
-            <script src="https://devsecops-workshop.github.io/mermaid/mermaid.js?1714740090"></script>
+            <script src="https://devsecops-workshop.github.io/mermaid/mermaid.js?1714740158"></script>
         
         <script>
             mermaid.initialize({ startOnLoad: true });
diff --git a/10-rhacs-setup/index.html b/10-rhacs-setup/index.html
index 3300a6f..1268496 100644
--- a/10-rhacs-setup/index.html
+++ b/10-rhacs-setup/index.html
@@ -12,22 +12,22 @@
     <title>Install and Configure ACS :: DevSecOps Workshop</title>
 
     
-    <link href="https://devsecops-workshop.github.io/css/nucleus.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/fontawesome-all.min.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/hybrid.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/featherlight.min.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/perfect-scrollbar.min.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/auto-complete.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/atom-one-dark-reasonable.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/theme.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/tabs.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/hugo-theme.css?1714740090" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/nucleus.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/fontawesome-all.min.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/hybrid.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/featherlight.min.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/perfect-scrollbar.min.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/auto-complete.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/atom-one-dark-reasonable.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/theme.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/tabs.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/hugo-theme.css?1714740158" rel="stylesheet">
     
-    <link href="https://devsecops-workshop.github.io/css/theme-red.css?1714740090" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/theme-red.css?1714740158" rel="stylesheet">
     
     
 
-    <script src="https://devsecops-workshop.github.io/js/jquery-3.3.1.min.js?1714740090"></script>
+    <script src="https://devsecops-workshop.github.io/js/jquery-3.3.1.min.js?1714740158"></script>
 
     <style>
       :root #header + #content > #left > #rlblock_left{
@@ -61,14 +61,14 @@
     <span data-search-clear=""><i class="fas fa-times"></i></span>
 </div>
 
-<script type="text/javascript" src="https://devsecops-workshop.github.io/js/lunr.min.js?1714740090"></script>
-<script type="text/javascript" src="https://devsecops-workshop.github.io/js/auto-complete.js?1714740090"></script>
+<script type="text/javascript" src="https://devsecops-workshop.github.io/js/lunr.min.js?1714740158"></script>
+<script type="text/javascript" src="https://devsecops-workshop.github.io/js/auto-complete.js?1714740158"></script>
 <script type="text/javascript">
     
         var baseurl = "https:\/\/devsecops-workshop.github.io\/";
     
 </script>
-<script type="text/javascript" src="https://devsecops-workshop.github.io/js/search.js?1714740090"></script>
+<script type="text/javascript" src="https://devsecops-workshop.github.io/js/search.js?1714740158"></script>
 
     
   </div>
@@ -668,7 +668,7 @@ <h3 id="prepare-to-add-secured-clusters">Prepare to add Secured Clusters</h3>
 </code></pre></div><p>You should now have these two files in your Web Terminal session: <code>bundle.json</code> and <code>kube-secrets.bundle</code>.</p>
 <p>The init bundle needs to be applied to all OpenShift clusters you want to secure and monitor.</p>
 
-<div class="notices info" ><p>As said, you can create an init bundle in the ACS Portal, download it and apply it from any terminal where you can run <code>oc</code> against your cluster. We did it the API way to show you how to do it and to enable you to use the Web Terminal.</p>
+<div class="notices info" ><p>As said, you can create an init bundle in the ACS Portal, download it and apply it from any terminal where you can run <code>oc</code> against your cluster. We used the API method to show you how to use it and to enable you to use the Web Terminal.</p>
 </div>
 
 <h3 id="prepare-the-secured-cluster">Prepare the Secured Cluster</h3>
@@ -707,7 +707,7 @@ <h3 id="prepare-the-secured-cluster">Prepare the Secured Cluster</h3>
 <h2 id="configure-quay-integrations-in-acs">Configure Quay Integrations in ACS</h2>
 <h3 id="create-an-integration-to-scan-the-quay-registry">Create an integration to scan the Quay registry</h3>
 <p>To enable scanning of images in your Quay registry, you&rsquo;ll have to configure an <strong>Integration</strong> with valid credentials, so this is what you&rsquo;ll do.</p>
-<p>Now create a new Integration:</p>
+<p>Now, create a new Integration:</p>
 <ul>
 <li>Access the <strong>RHACS Portal</strong> and configure the already existing integrations of type <strong>Generic Docker Registry</strong>.</li>
 <li>Go to <strong>Platform Configuration -&gt; Integrations -&gt; Generic Docker Registry</strong>.</li>
@@ -997,19 +997,19 @@ <h4>Click image to enlarge</h4>
     <div style="left: -1000px; overflow: scroll; position: absolute; top: -1000px; border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;">
       <div style="border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;"></div>
     </div>
-    <script src="https://devsecops-workshop.github.io/js/clipboard.min.js?1714740090"></script>
-    <script src="https://devsecops-workshop.github.io/js/perfect-scrollbar.min.js?1714740090"></script>
-    <script src="https://devsecops-workshop.github.io/js/perfect-scrollbar.jquery.min.js?1714740090"></script>
-    <script src="https://devsecops-workshop.github.io/js/jquery.sticky.js?1714740090"></script>
-    <script src="https://devsecops-workshop.github.io/js/featherlight.min.js?1714740090"></script>
-    <script src="https://devsecops-workshop.github.io/js/highlight.pack.js?1714740090"></script>
+    <script src="https://devsecops-workshop.github.io/js/clipboard.min.js?1714740158"></script>
+    <script src="https://devsecops-workshop.github.io/js/perfect-scrollbar.min.js?1714740158"></script>
+    <script src="https://devsecops-workshop.github.io/js/perfect-scrollbar.jquery.min.js?1714740158"></script>
+    <script src="https://devsecops-workshop.github.io/js/jquery.sticky.js?1714740158"></script>
+    <script src="https://devsecops-workshop.github.io/js/featherlight.min.js?1714740158"></script>
+    <script src="https://devsecops-workshop.github.io/js/highlight.pack.js?1714740158"></script>
     <script>hljs.initHighlightingOnLoad();</script>
-    <script src="https://devsecops-workshop.github.io/js/modernizr.custom-3.6.0.js?1714740090"></script>
-    <script src="https://devsecops-workshop.github.io/js/learn.js?1714740090"></script>
-    <script src="https://devsecops-workshop.github.io/js/hugo-learn.js?1714740090"></script>
+    <script src="https://devsecops-workshop.github.io/js/modernizr.custom-3.6.0.js?1714740158"></script>
+    <script src="https://devsecops-workshop.github.io/js/learn.js?1714740158"></script>
+    <script src="https://devsecops-workshop.github.io/js/hugo-learn.js?1714740158"></script>
     
         
-            <script src="https://devsecops-workshop.github.io/mermaid/mermaid.js?1714740090"></script>
+            <script src="https://devsecops-workshop.github.io/mermaid/mermaid.js?1714740158"></script>
         
         <script>
             mermaid.initialize({ startOnLoad: true });
diff --git a/11-rhacs-warmup/index.html b/11-rhacs-warmup/index.html
index 303746d..f6e5bf0 100644
--- a/11-rhacs-warmup/index.html
+++ b/11-rhacs-warmup/index.html
@@ -12,22 +12,22 @@
     <title>Getting to know ACS :: DevSecOps Workshop</title>
 
     
-    <link href="https://devsecops-workshop.github.io/css/nucleus.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/fontawesome-all.min.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/hybrid.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/featherlight.min.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/perfect-scrollbar.min.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/auto-complete.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/atom-one-dark-reasonable.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/theme.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/tabs.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/hugo-theme.css?1714740090" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/nucleus.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/fontawesome-all.min.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/hybrid.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/featherlight.min.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/perfect-scrollbar.min.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/auto-complete.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/atom-one-dark-reasonable.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/theme.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/tabs.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/hugo-theme.css?1714740158" rel="stylesheet">
     
-    <link href="https://devsecops-workshop.github.io/css/theme-red.css?1714740090" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/theme-red.css?1714740158" rel="stylesheet">
     
     
 
-    <script src="https://devsecops-workshop.github.io/js/jquery-3.3.1.min.js?1714740090"></script>
+    <script src="https://devsecops-workshop.github.io/js/jquery-3.3.1.min.js?1714740158"></script>
 
     <style>
       :root #header + #content > #left > #rlblock_left{
@@ -61,14 +61,14 @@
     <span data-search-clear=""><i class="fas fa-times"></i></span>
 </div>
 
-<script type="text/javascript" src="https://devsecops-workshop.github.io/js/lunr.min.js?1714740090"></script>
-<script type="text/javascript" src="https://devsecops-workshop.github.io/js/auto-complete.js?1714740090"></script>
+<script type="text/javascript" src="https://devsecops-workshop.github.io/js/lunr.min.js?1714740158"></script>
+<script type="text/javascript" src="https://devsecops-workshop.github.io/js/auto-complete.js?1714740158"></script>
 <script type="text/javascript">
     
         var baseurl = "https:\/\/devsecops-workshop.github.io\/";
     
 </script>
-<script type="text/javascript" src="https://devsecops-workshop.github.io/js/search.js?1714740090"></script>
+<script type="text/javascript" src="https://devsecops-workshop.github.io/js/search.js?1714740158"></script>
 
     
   </div>
@@ -880,19 +880,19 @@ <h4>Click image to enlarge</h4>
     <div style="left: -1000px; overflow: scroll; position: absolute; top: -1000px; border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;">
       <div style="border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;"></div>
     </div>
-    <script src="https://devsecops-workshop.github.io/js/clipboard.min.js?1714740090"></script>
-    <script src="https://devsecops-workshop.github.io/js/perfect-scrollbar.min.js?1714740090"></script>
-    <script src="https://devsecops-workshop.github.io/js/perfect-scrollbar.jquery.min.js?1714740090"></script>
-    <script src="https://devsecops-workshop.github.io/js/jquery.sticky.js?1714740090"></script>
-    <script src="https://devsecops-workshop.github.io/js/featherlight.min.js?1714740090"></script>
-    <script src="https://devsecops-workshop.github.io/js/highlight.pack.js?1714740090"></script>
+    <script src="https://devsecops-workshop.github.io/js/clipboard.min.js?1714740158"></script>
+    <script src="https://devsecops-workshop.github.io/js/perfect-scrollbar.min.js?1714740158"></script>
+    <script src="https://devsecops-workshop.github.io/js/perfect-scrollbar.jquery.min.js?1714740158"></script>
+    <script src="https://devsecops-workshop.github.io/js/jquery.sticky.js?1714740158"></script>
+    <script src="https://devsecops-workshop.github.io/js/featherlight.min.js?1714740158"></script>
+    <script src="https://devsecops-workshop.github.io/js/highlight.pack.js?1714740158"></script>
     <script>hljs.initHighlightingOnLoad();</script>
-    <script src="https://devsecops-workshop.github.io/js/modernizr.custom-3.6.0.js?1714740090"></script>
-    <script src="https://devsecops-workshop.github.io/js/learn.js?1714740090"></script>
-    <script src="https://devsecops-workshop.github.io/js/hugo-learn.js?1714740090"></script>
+    <script src="https://devsecops-workshop.github.io/js/modernizr.custom-3.6.0.js?1714740158"></script>
+    <script src="https://devsecops-workshop.github.io/js/learn.js?1714740158"></script>
+    <script src="https://devsecops-workshop.github.io/js/hugo-learn.js?1714740158"></script>
     
         
-            <script src="https://devsecops-workshop.github.io/mermaid/mermaid.js?1714740090"></script>
+            <script src="https://devsecops-workshop.github.io/mermaid/mermaid.js?1714740158"></script>
         
         <script>
             mermaid.initialize({ startOnLoad: true });
diff --git a/12-create-policy/index.html b/12-create-policy/index.html
index 61f8d35..c2ab9ca 100644
--- a/12-create-policy/index.html
+++ b/12-create-policy/index.html
@@ -12,22 +12,22 @@
     <title>Create a Custom Security Policy :: DevSecOps Workshop</title>
 
     
-    <link href="https://devsecops-workshop.github.io/css/nucleus.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/fontawesome-all.min.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/hybrid.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/featherlight.min.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/perfect-scrollbar.min.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/auto-complete.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/atom-one-dark-reasonable.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/theme.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/tabs.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/hugo-theme.css?1714740090" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/nucleus.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/fontawesome-all.min.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/hybrid.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/featherlight.min.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/perfect-scrollbar.min.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/auto-complete.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/atom-one-dark-reasonable.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/theme.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/tabs.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/hugo-theme.css?1714740158" rel="stylesheet">
     
-    <link href="https://devsecops-workshop.github.io/css/theme-red.css?1714740090" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/theme-red.css?1714740158" rel="stylesheet">
     
     
 
-    <script src="https://devsecops-workshop.github.io/js/jquery-3.3.1.min.js?1714740090"></script>
+    <script src="https://devsecops-workshop.github.io/js/jquery-3.3.1.min.js?1714740158"></script>
 
     <style>
       :root #header + #content > #left > #rlblock_left{
@@ -61,14 +61,14 @@
     <span data-search-clear=""><i class="fas fa-times"></i></span>
 </div>
 
-<script type="text/javascript" src="https://devsecops-workshop.github.io/js/lunr.min.js?1714740090"></script>
-<script type="text/javascript" src="https://devsecops-workshop.github.io/js/auto-complete.js?1714740090"></script>
+<script type="text/javascript" src="https://devsecops-workshop.github.io/js/lunr.min.js?1714740158"></script>
+<script type="text/javascript" src="https://devsecops-workshop.github.io/js/auto-complete.js?1714740158"></script>
 <script type="text/javascript">
     
         var baseurl = "https:\/\/devsecops-workshop.github.io\/";
     
 </script>
-<script type="text/javascript" src="https://devsecops-workshop.github.io/js/search.js?1714740090"></script>
+<script type="text/javascript" src="https://devsecops-workshop.github.io/js/search.js?1714740158"></script>
 
     
   </div>
@@ -547,6 +547,7 @@ <h2 id="create-a-custom-system-policy">Create a Custom System Policy</h2>
 <li><strong>Policy Scope</strong>
 <ul>
 <li>You could limit the scope the policy is applied in, do nothing for now</li>
+<li>Click <strong>Next</strong></li>
 </ul>
 </li>
 <li><strong>Review Policy</strong>
@@ -583,7 +584,7 @@ <h4>Click image to enlarge</h4>
 </li>
 </ul>
 
-<div class="notices tip" ><p>There will be other policy violations listed, triggered by default policies, have a look around. Note that none of the policies is enforced (so that the pipeline build would be stopped) yet!</p>
+<div class="notices tip" ><p>There will be other policy violations listed, triggered by default policies, have a look around. Note that none of the policies are enforced (so that the pipeline build would be stopped) yet!</p>
 </div>
 
 <p>Now start the pipeline with the fixed image version that doesn&rsquo;t contain the CVE anymore:</p>
@@ -877,19 +878,19 @@ <h4>Click image to enlarge</h4>
     <div style="left: -1000px; overflow: scroll; position: absolute; top: -1000px; border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;">
       <div style="border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;"></div>
     </div>
-    <script src="https://devsecops-workshop.github.io/js/clipboard.min.js?1714740090"></script>
-    <script src="https://devsecops-workshop.github.io/js/perfect-scrollbar.min.js?1714740090"></script>
-    <script src="https://devsecops-workshop.github.io/js/perfect-scrollbar.jquery.min.js?1714740090"></script>
-    <script src="https://devsecops-workshop.github.io/js/jquery.sticky.js?1714740090"></script>
-    <script src="https://devsecops-workshop.github.io/js/featherlight.min.js?1714740090"></script>
-    <script src="https://devsecops-workshop.github.io/js/highlight.pack.js?1714740090"></script>
+    <script src="https://devsecops-workshop.github.io/js/clipboard.min.js?1714740158"></script>
+    <script src="https://devsecops-workshop.github.io/js/perfect-scrollbar.min.js?1714740158"></script>
+    <script src="https://devsecops-workshop.github.io/js/perfect-scrollbar.jquery.min.js?1714740158"></script>
+    <script src="https://devsecops-workshop.github.io/js/jquery.sticky.js?1714740158"></script>
+    <script src="https://devsecops-workshop.github.io/js/featherlight.min.js?1714740158"></script>
+    <script src="https://devsecops-workshop.github.io/js/highlight.pack.js?1714740158"></script>
     <script>hljs.initHighlightingOnLoad();</script>
-    <script src="https://devsecops-workshop.github.io/js/modernizr.custom-3.6.0.js?1714740090"></script>
-    <script src="https://devsecops-workshop.github.io/js/learn.js?1714740090"></script>
-    <script src="https://devsecops-workshop.github.io/js/hugo-learn.js?1714740090"></script>
+    <script src="https://devsecops-workshop.github.io/js/modernizr.custom-3.6.0.js?1714740158"></script>
+    <script src="https://devsecops-workshop.github.io/js/learn.js?1714740158"></script>
+    <script src="https://devsecops-workshop.github.io/js/hugo-learn.js?1714740158"></script>
     
         
-            <script src="https://devsecops-workshop.github.io/mermaid/mermaid.js?1714740090"></script>
+            <script src="https://devsecops-workshop.github.io/mermaid/mermaid.js?1714740158"></script>
         
         <script>
             mermaid.initialize({ startOnLoad: true });
diff --git a/13-rhacs-pipeline/index.html b/13-rhacs-pipeline/index.html
index 8623918..d762284 100644
--- a/13-rhacs-pipeline/index.html
+++ b/13-rhacs-pipeline/index.html
@@ -12,22 +12,22 @@
     <title>Integrating ACS into the Pipeline :: DevSecOps Workshop</title>
 
     
-    <link href="https://devsecops-workshop.github.io/css/nucleus.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/fontawesome-all.min.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/hybrid.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/featherlight.min.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/perfect-scrollbar.min.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/auto-complete.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/atom-one-dark-reasonable.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/theme.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/tabs.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/hugo-theme.css?1714740090" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/nucleus.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/fontawesome-all.min.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/hybrid.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/featherlight.min.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/perfect-scrollbar.min.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/auto-complete.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/atom-one-dark-reasonable.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/theme.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/tabs.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/hugo-theme.css?1714740158" rel="stylesheet">
     
-    <link href="https://devsecops-workshop.github.io/css/theme-red.css?1714740090" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/theme-red.css?1714740158" rel="stylesheet">
     
     
 
-    <script src="https://devsecops-workshop.github.io/js/jquery-3.3.1.min.js?1714740090"></script>
+    <script src="https://devsecops-workshop.github.io/js/jquery-3.3.1.min.js?1714740158"></script>
 
     <style>
       :root #header + #content > #left > #rlblock_left{
@@ -61,14 +61,14 @@
     <span data-search-clear=""><i class="fas fa-times"></i></span>
 </div>
 
-<script type="text/javascript" src="https://devsecops-workshop.github.io/js/lunr.min.js?1714740090"></script>
-<script type="text/javascript" src="https://devsecops-workshop.github.io/js/auto-complete.js?1714740090"></script>
+<script type="text/javascript" src="https://devsecops-workshop.github.io/js/lunr.min.js?1714740158"></script>
+<script type="text/javascript" src="https://devsecops-workshop.github.io/js/auto-complete.js?1714740158"></script>
 <script type="text/javascript">
     
         var baseurl = "https:\/\/devsecops-workshop.github.io\/";
     
 </script>
-<script type="text/javascript" src="https://devsecops-workshop.github.io/js/search.js?1714740090"></script>
+<script type="text/javascript" src="https://devsecops-workshop.github.io/js/search.js?1714740158"></script>
 
     
   </div>
@@ -549,8 +549,9 @@ <h3 id="create-ocp-secret-with-token">Create OCP secret with token</h3>
 </div>
 
 <h3 id="remove-imagestream-change-trigger">Remove ImageStream Change Trigger</h3>
-<p>There is one more thing you have to do before integrating the image scanning into your build pipeline: When you created your deployment, a <code>trigger</code> was automatically added that will deploy a new version when the image referenced by the <code>ImageStream</code> changes.</p>
-<p>This is not what we want! Because this way a newly build image would be deployed immediately even if the <code>roxctl</code> scan finds a policy violation and terminates the pipeline.</p>
+<p>There is one more thing you have to do before integrating the image scanning into your build pipeline:<br>
+When you created your deployment, a <code>trigger</code> was automatically added that deploys a new version when the image referenced by the <code>ImageStream</code> changes.</p>
+<p>This is not what we want! Because this way a newly build image would be deployed immediately even if the <code>roxctl</code> scan detects a policy violation and terminates the pipeline.</p>
 <p>Have a look for yourself:</p>
 <ul>
 <li>In the OCP console go to <strong>Workloads-&gt;Deployments</strong> and open the <code>workshop</code> Deployment</li>
@@ -642,7 +643,7 @@ <h3 id="add-the-scan-task-to-the-pipeline">Add the Scan Task to the Pipeline</h3
 </div>
 
 <ul>
-<li>Hover your mouse over <code>build</code> task and click the <strong>+</strong> at the right side side of it, to add a task</li>
+<li>Hover your mouse over <code>build</code> task and click the <strong>+</strong> at the right side of it, to add a task</li>
 <li>Click on <strong>Add task</strong></li>
 <li>Then enter <strong>rox-image-check</strong> in the search box
 <figure>
@@ -681,7 +682,7 @@ <h4>Click image to enlarge</h4>
 <li>Don&rsquo;t save yet</li>
 </ul>
 <h3 id="add-the-oc-patch-task-to-the-pipeline">Add the oc patch Task to the Pipeline</h3>
-<p>As you remember we removed the <strong>trigger</strong> that updates the <strong>Deployment</strong> on <strong>ImageStream</strong> chnages. Now the <strong>Deployment</strong> will never be updated and our new Image version will never be deployed to <code>workshop-int</code>.</p>
+<p>As you remember we removed the <strong>trigger</strong> that updates the <strong>Deployment</strong> on <strong>ImageStream</strong> changes. Now the <strong>Deployment</strong> will never be updated and our new Image version will never be deployed to <code>workshop-int</code>.</p>
 <p>To fix this we will add a new <strong>oc client Task</strong> that updates the <strong>Deployment</strong>, only after the <strong>Scan Task</strong> has run.</p>
 <ul>
 <li>While still in the visual pipeline editor</li>
@@ -1013,19 +1014,19 @@ <h4>Click image to enlarge</h4>
     <div style="left: -1000px; overflow: scroll; position: absolute; top: -1000px; border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;">
       <div style="border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;"></div>
     </div>
-    <script src="https://devsecops-workshop.github.io/js/clipboard.min.js?1714740090"></script>
-    <script src="https://devsecops-workshop.github.io/js/perfect-scrollbar.min.js?1714740090"></script>
-    <script src="https://devsecops-workshop.github.io/js/perfect-scrollbar.jquery.min.js?1714740090"></script>
-    <script src="https://devsecops-workshop.github.io/js/jquery.sticky.js?1714740090"></script>
-    <script src="https://devsecops-workshop.github.io/js/featherlight.min.js?1714740090"></script>
-    <script src="https://devsecops-workshop.github.io/js/highlight.pack.js?1714740090"></script>
+    <script src="https://devsecops-workshop.github.io/js/clipboard.min.js?1714740158"></script>
+    <script src="https://devsecops-workshop.github.io/js/perfect-scrollbar.min.js?1714740158"></script>
+    <script src="https://devsecops-workshop.github.io/js/perfect-scrollbar.jquery.min.js?1714740158"></script>
+    <script src="https://devsecops-workshop.github.io/js/jquery.sticky.js?1714740158"></script>
+    <script src="https://devsecops-workshop.github.io/js/featherlight.min.js?1714740158"></script>
+    <script src="https://devsecops-workshop.github.io/js/highlight.pack.js?1714740158"></script>
     <script>hljs.initHighlightingOnLoad();</script>
-    <script src="https://devsecops-workshop.github.io/js/modernizr.custom-3.6.0.js?1714740090"></script>
-    <script src="https://devsecops-workshop.github.io/js/learn.js?1714740090"></script>
-    <script src="https://devsecops-workshop.github.io/js/hugo-learn.js?1714740090"></script>
+    <script src="https://devsecops-workshop.github.io/js/modernizr.custom-3.6.0.js?1714740158"></script>
+    <script src="https://devsecops-workshop.github.io/js/learn.js?1714740158"></script>
+    <script src="https://devsecops-workshop.github.io/js/hugo-learn.js?1714740158"></script>
     
         
-            <script src="https://devsecops-workshop.github.io/mermaid/mermaid.js?1714740090"></script>
+            <script src="https://devsecops-workshop.github.io/mermaid/mermaid.js?1714740158"></script>
         
         <script>
             mermaid.initialize({ startOnLoad: true });
diff --git a/15-runtime-security/index.html b/15-runtime-security/index.html
index 11a38bc..bc41e19 100644
--- a/15-runtime-security/index.html
+++ b/15-runtime-security/index.html
@@ -12,22 +12,22 @@
     <title>Securing Runtime Events :: DevSecOps Workshop</title>
 
     
-    <link href="https://devsecops-workshop.github.io/css/nucleus.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/fontawesome-all.min.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/hybrid.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/featherlight.min.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/perfect-scrollbar.min.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/auto-complete.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/atom-one-dark-reasonable.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/theme.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/tabs.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/hugo-theme.css?1714740090" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/nucleus.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/fontawesome-all.min.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/hybrid.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/featherlight.min.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/perfect-scrollbar.min.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/auto-complete.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/atom-one-dark-reasonable.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/theme.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/tabs.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/hugo-theme.css?1714740158" rel="stylesheet">
     
-    <link href="https://devsecops-workshop.github.io/css/theme-red.css?1714740090" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/theme-red.css?1714740158" rel="stylesheet">
     
     
 
-    <script src="https://devsecops-workshop.github.io/js/jquery-3.3.1.min.js?1714740090"></script>
+    <script src="https://devsecops-workshop.github.io/js/jquery-3.3.1.min.js?1714740158"></script>
 
     <style>
       :root #header + #content > #left > #rlblock_left{
@@ -61,14 +61,14 @@
     <span data-search-clear=""><i class="fas fa-times"></i></span>
 </div>
 
-<script type="text/javascript" src="https://devsecops-workshop.github.io/js/lunr.min.js?1714740090"></script>
-<script type="text/javascript" src="https://devsecops-workshop.github.io/js/auto-complete.js?1714740090"></script>
+<script type="text/javascript" src="https://devsecops-workshop.github.io/js/lunr.min.js?1714740158"></script>
+<script type="text/javascript" src="https://devsecops-workshop.github.io/js/auto-complete.js?1714740158"></script>
 <script type="text/javascript">
     
         var baseurl = "https:\/\/devsecops-workshop.github.io\/";
     
 </script>
-<script type="text/javascript" src="https://devsecops-workshop.github.io/js/search.js?1714740090"></script>
+<script type="text/javascript" src="https://devsecops-workshop.github.io/js/search.js?1714740158"></script>
 
     
   </div>
@@ -829,19 +829,19 @@ <h4>Click image to enlarge</h4>
     <div style="left: -1000px; overflow: scroll; position: absolute; top: -1000px; border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;">
       <div style="border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;"></div>
     </div>
-    <script src="https://devsecops-workshop.github.io/js/clipboard.min.js?1714740090"></script>
-    <script src="https://devsecops-workshop.github.io/js/perfect-scrollbar.min.js?1714740090"></script>
-    <script src="https://devsecops-workshop.github.io/js/perfect-scrollbar.jquery.min.js?1714740090"></script>
-    <script src="https://devsecops-workshop.github.io/js/jquery.sticky.js?1714740090"></script>
-    <script src="https://devsecops-workshop.github.io/js/featherlight.min.js?1714740090"></script>
-    <script src="https://devsecops-workshop.github.io/js/highlight.pack.js?1714740090"></script>
+    <script src="https://devsecops-workshop.github.io/js/clipboard.min.js?1714740158"></script>
+    <script src="https://devsecops-workshop.github.io/js/perfect-scrollbar.min.js?1714740158"></script>
+    <script src="https://devsecops-workshop.github.io/js/perfect-scrollbar.jquery.min.js?1714740158"></script>
+    <script src="https://devsecops-workshop.github.io/js/jquery.sticky.js?1714740158"></script>
+    <script src="https://devsecops-workshop.github.io/js/featherlight.min.js?1714740158"></script>
+    <script src="https://devsecops-workshop.github.io/js/highlight.pack.js?1714740158"></script>
     <script>hljs.initHighlightingOnLoad();</script>
-    <script src="https://devsecops-workshop.github.io/js/modernizr.custom-3.6.0.js?1714740090"></script>
-    <script src="https://devsecops-workshop.github.io/js/learn.js?1714740090"></script>
-    <script src="https://devsecops-workshop.github.io/js/hugo-learn.js?1714740090"></script>
+    <script src="https://devsecops-workshop.github.io/js/modernizr.custom-3.6.0.js?1714740158"></script>
+    <script src="https://devsecops-workshop.github.io/js/learn.js?1714740158"></script>
+    <script src="https://devsecops-workshop.github.io/js/hugo-learn.js?1714740158"></script>
     
         
-            <script src="https://devsecops-workshop.github.io/mermaid/mermaid.js?1714740090"></script>
+            <script src="https://devsecops-workshop.github.io/mermaid/mermaid.js?1714740158"></script>
         
         <script>
             mermaid.initialize({ startOnLoad: true });
diff --git a/16-acm/index.html b/16-acm/index.html
index 6934e49..634b7a9 100644
--- a/16-acm/index.html
+++ b/16-acm/index.html
@@ -12,22 +12,22 @@
     <title>Advanced Cluster Management :: DevSecOps Workshop</title>
 
     
-    <link href="https://devsecops-workshop.github.io/css/nucleus.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/fontawesome-all.min.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/hybrid.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/featherlight.min.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/perfect-scrollbar.min.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/auto-complete.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/atom-one-dark-reasonable.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/theme.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/tabs.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/hugo-theme.css?1714740090" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/nucleus.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/fontawesome-all.min.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/hybrid.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/featherlight.min.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/perfect-scrollbar.min.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/auto-complete.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/atom-one-dark-reasonable.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/theme.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/tabs.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/hugo-theme.css?1714740158" rel="stylesheet">
     
-    <link href="https://devsecops-workshop.github.io/css/theme-red.css?1714740090" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/theme-red.css?1714740158" rel="stylesheet">
     
     
 
-    <script src="https://devsecops-workshop.github.io/js/jquery-3.3.1.min.js?1714740090"></script>
+    <script src="https://devsecops-workshop.github.io/js/jquery-3.3.1.min.js?1714740158"></script>
 
     <style>
       :root #header + #content > #left > #rlblock_left{
@@ -61,14 +61,14 @@
     <span data-search-clear=""><i class="fas fa-times"></i></span>
 </div>
 
-<script type="text/javascript" src="https://devsecops-workshop.github.io/js/lunr.min.js?1714740090"></script>
-<script type="text/javascript" src="https://devsecops-workshop.github.io/js/auto-complete.js?1714740090"></script>
+<script type="text/javascript" src="https://devsecops-workshop.github.io/js/lunr.min.js?1714740158"></script>
+<script type="text/javascript" src="https://devsecops-workshop.github.io/js/auto-complete.js?1714740158"></script>
 <script type="text/javascript">
     
         var baseurl = "https:\/\/devsecops-workshop.github.io\/";
     
 </script>
-<script type="text/javascript" src="https://devsecops-workshop.github.io/js/search.js?1714740090"></script>
+<script type="text/javascript" src="https://devsecops-workshop.github.io/js/search.js?1714740158"></script>
 
     
   </div>
@@ -1076,19 +1076,19 @@ <h3 id="use-the-acm---ansible-integration">Use the ACM - Ansible integration</h3
     <div style="left: -1000px; overflow: scroll; position: absolute; top: -1000px; border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;">
       <div style="border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;"></div>
     </div>
-    <script src="https://devsecops-workshop.github.io/js/clipboard.min.js?1714740090"></script>
-    <script src="https://devsecops-workshop.github.io/js/perfect-scrollbar.min.js?1714740090"></script>
-    <script src="https://devsecops-workshop.github.io/js/perfect-scrollbar.jquery.min.js?1714740090"></script>
-    <script src="https://devsecops-workshop.github.io/js/jquery.sticky.js?1714740090"></script>
-    <script src="https://devsecops-workshop.github.io/js/featherlight.min.js?1714740090"></script>
-    <script src="https://devsecops-workshop.github.io/js/highlight.pack.js?1714740090"></script>
+    <script src="https://devsecops-workshop.github.io/js/clipboard.min.js?1714740158"></script>
+    <script src="https://devsecops-workshop.github.io/js/perfect-scrollbar.min.js?1714740158"></script>
+    <script src="https://devsecops-workshop.github.io/js/perfect-scrollbar.jquery.min.js?1714740158"></script>
+    <script src="https://devsecops-workshop.github.io/js/jquery.sticky.js?1714740158"></script>
+    <script src="https://devsecops-workshop.github.io/js/featherlight.min.js?1714740158"></script>
+    <script src="https://devsecops-workshop.github.io/js/highlight.pack.js?1714740158"></script>
     <script>hljs.initHighlightingOnLoad();</script>
-    <script src="https://devsecops-workshop.github.io/js/modernizr.custom-3.6.0.js?1714740090"></script>
-    <script src="https://devsecops-workshop.github.io/js/learn.js?1714740090"></script>
-    <script src="https://devsecops-workshop.github.io/js/hugo-learn.js?1714740090"></script>
+    <script src="https://devsecops-workshop.github.io/js/modernizr.custom-3.6.0.js?1714740158"></script>
+    <script src="https://devsecops-workshop.github.io/js/learn.js?1714740158"></script>
+    <script src="https://devsecops-workshop.github.io/js/hugo-learn.js?1714740158"></script>
     
         
-            <script src="https://devsecops-workshop.github.io/mermaid/mermaid.js?1714740090"></script>
+            <script src="https://devsecops-workshop.github.io/mermaid/mermaid.js?1714740158"></script>
         
         <script>
             mermaid.initialize({ startOnLoad: true });
diff --git a/2-install-prerequisites/index.html b/2-install-prerequisites/index.html
index 127b70b..e52310d 100644
--- a/2-install-prerequisites/index.html
+++ b/2-install-prerequisites/index.html
@@ -12,22 +12,22 @@
     <title>Install Prerequisites :: DevSecOps Workshop</title>
 
     
-    <link href="https://devsecops-workshop.github.io/css/nucleus.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/fontawesome-all.min.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/hybrid.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/featherlight.min.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/perfect-scrollbar.min.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/auto-complete.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/atom-one-dark-reasonable.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/theme.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/tabs.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/hugo-theme.css?1714740090" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/nucleus.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/fontawesome-all.min.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/hybrid.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/featherlight.min.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/perfect-scrollbar.min.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/auto-complete.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/atom-one-dark-reasonable.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/theme.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/tabs.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/hugo-theme.css?1714740158" rel="stylesheet">
     
-    <link href="https://devsecops-workshop.github.io/css/theme-red.css?1714740090" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/theme-red.css?1714740158" rel="stylesheet">
     
     
 
-    <script src="https://devsecops-workshop.github.io/js/jquery-3.3.1.min.js?1714740090"></script>
+    <script src="https://devsecops-workshop.github.io/js/jquery-3.3.1.min.js?1714740158"></script>
 
     <style>
       :root #header + #content > #left > #rlblock_left{
@@ -61,14 +61,14 @@
     <span data-search-clear=""><i class="fas fa-times"></i></span>
 </div>
 
-<script type="text/javascript" src="https://devsecops-workshop.github.io/js/lunr.min.js?1714740090"></script>
-<script type="text/javascript" src="https://devsecops-workshop.github.io/js/auto-complete.js?1714740090"></script>
+<script type="text/javascript" src="https://devsecops-workshop.github.io/js/lunr.min.js?1714740158"></script>
+<script type="text/javascript" src="https://devsecops-workshop.github.io/js/auto-complete.js?1714740158"></script>
 <script type="text/javascript">
     
         var baseurl = "https:\/\/devsecops-workshop.github.io\/";
     
 </script>
-<script type="text/javascript" src="https://devsecops-workshop.github.io/js/search.js?1714740090"></script>
+<script type="text/javascript" src="https://devsecops-workshop.github.io/js/search.js?1714740158"></script>
 
     
   </div>
@@ -1040,19 +1040,19 @@ <h4>Click image to enlarge</h4>
     <div style="left: -1000px; overflow: scroll; position: absolute; top: -1000px; border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;">
       <div style="border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;"></div>
     </div>
-    <script src="https://devsecops-workshop.github.io/js/clipboard.min.js?1714740090"></script>
-    <script src="https://devsecops-workshop.github.io/js/perfect-scrollbar.min.js?1714740090"></script>
-    <script src="https://devsecops-workshop.github.io/js/perfect-scrollbar.jquery.min.js?1714740090"></script>
-    <script src="https://devsecops-workshop.github.io/js/jquery.sticky.js?1714740090"></script>
-    <script src="https://devsecops-workshop.github.io/js/featherlight.min.js?1714740090"></script>
-    <script src="https://devsecops-workshop.github.io/js/highlight.pack.js?1714740090"></script>
+    <script src="https://devsecops-workshop.github.io/js/clipboard.min.js?1714740158"></script>
+    <script src="https://devsecops-workshop.github.io/js/perfect-scrollbar.min.js?1714740158"></script>
+    <script src="https://devsecops-workshop.github.io/js/perfect-scrollbar.jquery.min.js?1714740158"></script>
+    <script src="https://devsecops-workshop.github.io/js/jquery.sticky.js?1714740158"></script>
+    <script src="https://devsecops-workshop.github.io/js/featherlight.min.js?1714740158"></script>
+    <script src="https://devsecops-workshop.github.io/js/highlight.pack.js?1714740158"></script>
     <script>hljs.initHighlightingOnLoad();</script>
-    <script src="https://devsecops-workshop.github.io/js/modernizr.custom-3.6.0.js?1714740090"></script>
-    <script src="https://devsecops-workshop.github.io/js/learn.js?1714740090"></script>
-    <script src="https://devsecops-workshop.github.io/js/hugo-learn.js?1714740090"></script>
+    <script src="https://devsecops-workshop.github.io/js/modernizr.custom-3.6.0.js?1714740158"></script>
+    <script src="https://devsecops-workshop.github.io/js/learn.js?1714740158"></script>
+    <script src="https://devsecops-workshop.github.io/js/hugo-learn.js?1714740158"></script>
     
         
-            <script src="https://devsecops-workshop.github.io/mermaid/mermaid.js?1714740090"></script>
+            <script src="https://devsecops-workshop.github.io/mermaid/mermaid.js?1714740158"></script>
         
         <script>
             mermaid.initialize({ startOnLoad: true });
diff --git a/2.1-prepare-cluster/index.html b/2.1-prepare-cluster/index.html
index 2afa7ea..e860dcf 100644
--- a/2.1-prepare-cluster/index.html
+++ b/2.1-prepare-cluster/index.html
@@ -12,22 +12,22 @@
     <title>Prepare Cluster :: DevSecOps Workshop</title>
 
     
-    <link href="https://devsecops-workshop.github.io/css/nucleus.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/fontawesome-all.min.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/hybrid.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/featherlight.min.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/perfect-scrollbar.min.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/auto-complete.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/atom-one-dark-reasonable.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/theme.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/tabs.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/hugo-theme.css?1714740090" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/nucleus.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/fontawesome-all.min.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/hybrid.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/featherlight.min.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/perfect-scrollbar.min.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/auto-complete.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/atom-one-dark-reasonable.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/theme.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/tabs.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/hugo-theme.css?1714740158" rel="stylesheet">
     
-    <link href="https://devsecops-workshop.github.io/css/theme-red.css?1714740090" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/theme-red.css?1714740158" rel="stylesheet">
     
     
 
-    <script src="https://devsecops-workshop.github.io/js/jquery-3.3.1.min.js?1714740090"></script>
+    <script src="https://devsecops-workshop.github.io/js/jquery-3.3.1.min.js?1714740158"></script>
 
     <style>
       :root #header + #content > #left > #rlblock_left{
@@ -61,14 +61,14 @@
     <span data-search-clear=""><i class="fas fa-times"></i></span>
 </div>
 
-<script type="text/javascript" src="https://devsecops-workshop.github.io/js/lunr.min.js?1714740090"></script>
-<script type="text/javascript" src="https://devsecops-workshop.github.io/js/auto-complete.js?1714740090"></script>
+<script type="text/javascript" src="https://devsecops-workshop.github.io/js/lunr.min.js?1714740158"></script>
+<script type="text/javascript" src="https://devsecops-workshop.github.io/js/auto-complete.js?1714740158"></script>
 <script type="text/javascript">
     
         var baseurl = "https:\/\/devsecops-workshop.github.io\/";
     
 </script>
-<script type="text/javascript" src="https://devsecops-workshop.github.io/js/search.js?1714740090"></script>
+<script type="text/javascript" src="https://devsecops-workshop.github.io/js/search.js?1714740158"></script>
 
     
   </div>
@@ -836,19 +836,19 @@ <h4>Click image to enlarge</h4>
     <div style="left: -1000px; overflow: scroll; position: absolute; top: -1000px; border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;">
       <div style="border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;"></div>
     </div>
-    <script src="https://devsecops-workshop.github.io/js/clipboard.min.js?1714740090"></script>
-    <script src="https://devsecops-workshop.github.io/js/perfect-scrollbar.min.js?1714740090"></script>
-    <script src="https://devsecops-workshop.github.io/js/perfect-scrollbar.jquery.min.js?1714740090"></script>
-    <script src="https://devsecops-workshop.github.io/js/jquery.sticky.js?1714740090"></script>
-    <script src="https://devsecops-workshop.github.io/js/featherlight.min.js?1714740090"></script>
-    <script src="https://devsecops-workshop.github.io/js/highlight.pack.js?1714740090"></script>
+    <script src="https://devsecops-workshop.github.io/js/clipboard.min.js?1714740158"></script>
+    <script src="https://devsecops-workshop.github.io/js/perfect-scrollbar.min.js?1714740158"></script>
+    <script src="https://devsecops-workshop.github.io/js/perfect-scrollbar.jquery.min.js?1714740158"></script>
+    <script src="https://devsecops-workshop.github.io/js/jquery.sticky.js?1714740158"></script>
+    <script src="https://devsecops-workshop.github.io/js/featherlight.min.js?1714740158"></script>
+    <script src="https://devsecops-workshop.github.io/js/highlight.pack.js?1714740158"></script>
     <script>hljs.initHighlightingOnLoad();</script>
-    <script src="https://devsecops-workshop.github.io/js/modernizr.custom-3.6.0.js?1714740090"></script>
-    <script src="https://devsecops-workshop.github.io/js/learn.js?1714740090"></script>
-    <script src="https://devsecops-workshop.github.io/js/hugo-learn.js?1714740090"></script>
+    <script src="https://devsecops-workshop.github.io/js/modernizr.custom-3.6.0.js?1714740158"></script>
+    <script src="https://devsecops-workshop.github.io/js/learn.js?1714740158"></script>
+    <script src="https://devsecops-workshop.github.io/js/hugo-learn.js?1714740158"></script>
     
         
-            <script src="https://devsecops-workshop.github.io/mermaid/mermaid.js?1714740090"></script>
+            <script src="https://devsecops-workshop.github.io/mermaid/mermaid.js?1714740158"></script>
         
         <script>
             mermaid.initialize({ startOnLoad: true });
diff --git a/20-appendix/index.html b/20-appendix/index.html
index 54d6c30..387b06a 100644
--- a/20-appendix/index.html
+++ b/20-appendix/index.html
@@ -12,22 +12,22 @@
     <title>Appendix :: DevSecOps Workshop</title>
 
     
-    <link href="https://devsecops-workshop.github.io/css/nucleus.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/fontawesome-all.min.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/hybrid.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/featherlight.min.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/perfect-scrollbar.min.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/auto-complete.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/atom-one-dark-reasonable.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/theme.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/tabs.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/hugo-theme.css?1714740090" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/nucleus.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/fontawesome-all.min.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/hybrid.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/featherlight.min.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/perfect-scrollbar.min.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/auto-complete.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/atom-one-dark-reasonable.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/theme.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/tabs.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/hugo-theme.css?1714740158" rel="stylesheet">
     
-    <link href="https://devsecops-workshop.github.io/css/theme-red.css?1714740090" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/theme-red.css?1714740158" rel="stylesheet">
     
     
 
-    <script src="https://devsecops-workshop.github.io/js/jquery-3.3.1.min.js?1714740090"></script>
+    <script src="https://devsecops-workshop.github.io/js/jquery-3.3.1.min.js?1714740158"></script>
 
     <style>
       :root #header + #content > #left > #rlblock_left{
@@ -61,14 +61,14 @@
     <span data-search-clear=""><i class="fas fa-times"></i></span>
 </div>
 
-<script type="text/javascript" src="https://devsecops-workshop.github.io/js/lunr.min.js?1714740090"></script>
-<script type="text/javascript" src="https://devsecops-workshop.github.io/js/auto-complete.js?1714740090"></script>
+<script type="text/javascript" src="https://devsecops-workshop.github.io/js/lunr.min.js?1714740158"></script>
+<script type="text/javascript" src="https://devsecops-workshop.github.io/js/auto-complete.js?1714740158"></script>
 <script type="text/javascript">
     
         var baseurl = "https:\/\/devsecops-workshop.github.io\/";
     
 </script>
-<script type="text/javascript" src="https://devsecops-workshop.github.io/js/search.js?1714740090"></script>
+<script type="text/javascript" src="https://devsecops-workshop.github.io/js/search.js?1714740158"></script>
 
     
   </div>
@@ -817,19 +817,19 @@ <h2 id="create-a-serviceaccount-to-scan-the-internal-openshift-registry">Create
     <div style="left: -1000px; overflow: scroll; position: absolute; top: -1000px; border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;">
       <div style="border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;"></div>
     </div>
-    <script src="https://devsecops-workshop.github.io/js/clipboard.min.js?1714740090"></script>
-    <script src="https://devsecops-workshop.github.io/js/perfect-scrollbar.min.js?1714740090"></script>
-    <script src="https://devsecops-workshop.github.io/js/perfect-scrollbar.jquery.min.js?1714740090"></script>
-    <script src="https://devsecops-workshop.github.io/js/jquery.sticky.js?1714740090"></script>
-    <script src="https://devsecops-workshop.github.io/js/featherlight.min.js?1714740090"></script>
-    <script src="https://devsecops-workshop.github.io/js/highlight.pack.js?1714740090"></script>
+    <script src="https://devsecops-workshop.github.io/js/clipboard.min.js?1714740158"></script>
+    <script src="https://devsecops-workshop.github.io/js/perfect-scrollbar.min.js?1714740158"></script>
+    <script src="https://devsecops-workshop.github.io/js/perfect-scrollbar.jquery.min.js?1714740158"></script>
+    <script src="https://devsecops-workshop.github.io/js/jquery.sticky.js?1714740158"></script>
+    <script src="https://devsecops-workshop.github.io/js/featherlight.min.js?1714740158"></script>
+    <script src="https://devsecops-workshop.github.io/js/highlight.pack.js?1714740158"></script>
     <script>hljs.initHighlightingOnLoad();</script>
-    <script src="https://devsecops-workshop.github.io/js/modernizr.custom-3.6.0.js?1714740090"></script>
-    <script src="https://devsecops-workshop.github.io/js/learn.js?1714740090"></script>
-    <script src="https://devsecops-workshop.github.io/js/hugo-learn.js?1714740090"></script>
+    <script src="https://devsecops-workshop.github.io/js/modernizr.custom-3.6.0.js?1714740158"></script>
+    <script src="https://devsecops-workshop.github.io/js/learn.js?1714740158"></script>
+    <script src="https://devsecops-workshop.github.io/js/hugo-learn.js?1714740158"></script>
     
         
-            <script src="https://devsecops-workshop.github.io/mermaid/mermaid.js?1714740090"></script>
+            <script src="https://devsecops-workshop.github.io/mermaid/mermaid.js?1714740158"></script>
         
         <script>
             mermaid.initialize({ startOnLoad: true });
diff --git a/3-inner-loop/index.html b/3-inner-loop/index.html
index 29da683..1e0fdc7 100644
--- a/3-inner-loop/index.html
+++ b/3-inner-loop/index.html
@@ -12,22 +12,22 @@
     <title>Inner Loop :: DevSecOps Workshop</title>
 
     
-    <link href="https://devsecops-workshop.github.io/css/nucleus.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/fontawesome-all.min.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/hybrid.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/featherlight.min.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/perfect-scrollbar.min.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/auto-complete.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/atom-one-dark-reasonable.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/theme.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/tabs.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/hugo-theme.css?1714740090" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/nucleus.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/fontawesome-all.min.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/hybrid.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/featherlight.min.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/perfect-scrollbar.min.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/auto-complete.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/atom-one-dark-reasonable.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/theme.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/tabs.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/hugo-theme.css?1714740158" rel="stylesheet">
     
-    <link href="https://devsecops-workshop.github.io/css/theme-red.css?1714740090" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/theme-red.css?1714740158" rel="stylesheet">
     
     
 
-    <script src="https://devsecops-workshop.github.io/js/jquery-3.3.1.min.js?1714740090"></script>
+    <script src="https://devsecops-workshop.github.io/js/jquery-3.3.1.min.js?1714740158"></script>
 
     <style>
       :root #header + #content > #left > #rlblock_left{
@@ -61,14 +61,14 @@
     <span data-search-clear=""><i class="fas fa-times"></i></span>
 </div>
 
-<script type="text/javascript" src="https://devsecops-workshop.github.io/js/lunr.min.js?1714740090"></script>
-<script type="text/javascript" src="https://devsecops-workshop.github.io/js/auto-complete.js?1714740090"></script>
+<script type="text/javascript" src="https://devsecops-workshop.github.io/js/lunr.min.js?1714740158"></script>
+<script type="text/javascript" src="https://devsecops-workshop.github.io/js/auto-complete.js?1714740158"></script>
 <script type="text/javascript">
     
         var baseurl = "https:\/\/devsecops-workshop.github.io\/";
     
 </script>
-<script type="text/javascript" src="https://devsecops-workshop.github.io/js/search.js?1714740090"></script>
+<script type="text/javascript" src="https://devsecops-workshop.github.io/js/search.js?1714740158"></script>
 
     
   </div>
@@ -524,7 +524,7 @@ <h2 id="install-and-prepare-red-hat-openshift-dev-spaces">Install and Prepare Re
 </li>
 <li>On the right side click on the repository <code>gitea/quarkus-build-options</code></li>
 <li>Then click on the devfile <code>devspaces_devfile.yml</code></li>
-<li>Now click on button <strong>Raw</strong> (or <strong>Originalversion</strong> in German) and copy this URL</li>
+<li>Now click on button <strong>Raw</strong> (or <strong>Originalformat</strong> in German) and copy this URL</li>
 </ul>
 <p>It is important that you have the URL to the Raw version, otherwise DevSpace will recieve a website that it cannot parse.</p>
 <p>Now back in your DevSpaces Workspace :</p>
@@ -580,7 +580,7 @@ <h4>Click image to enlarge</h4>
 </li>
 </ul>
 </li>
-<li>In the following dialog <strong>Choose a folder to clone &hellip;</strong> Click the button <strong>OK</strong></li>
+<li>In the following dialog <strong>Choose a folder to clone &hellip;</strong>, move up the dirs and select the <code>/projects</code> dir, then click the button <strong>OK</strong></li>
 <li>In the following dialog when asked how to open the code, click on <strong>Open</strong>
 <figure>
     <img src="../images/vscode_open_folder.png?width=50pc&amp;classes=border,shadow"/> <figcaption>
@@ -626,15 +626,15 @@ <h2 id="access-openshift-and-create-the-development-stage-project">Access OpenSh
 <p><strong>odo</strong> is now intialized for your app. Let&rsquo;s deploy the app to openshift in odo dev mode</p>
 <pre><code>odo dev
 </code></pre><p>This will compile the app, start a pod in the OpenShift project and inject the app.</p>
-<p>There will be a couple of popups in the bottom right corner</p>
+<p>There will be a couple of popups in the bottom right corner (Click on all of them as explained below)</p>
 <p><img src="../images/devspaces_popup.png" alt="DevSpaces Popups"></p>
 <ul>
 <li>&ldquo;A new process is listening &hellip;&rdquo; -&gt; Choose <strong>Yes</strong></li>
 <li>&ldquo;Redirect is not enabled &hellip;&rdquo; &ndash;&gt; Click on <strong>Open in New Tab</strong></li>
 <li>&ldquo;Do you want VS Code - Open Source to open an external website&rdquo; &ndash;&gt; Choose <strong>Open</strong></li>
 </ul>
-<p>A new tab will open and show the webpage of your app. You may have to wait a reload in a few seconds.</p>
-<p>To test the app:</p>
+<p>New tabs will open. One with the DevFile Editor and one showing the Quarkus webpage of your app. You may have to wait a reload in a few seconds.</p>
+<p>To test the app in the Quarkus App tab:</p>
 <p>Your app should be displayed as a simple web page. In the <code>RESTEasy JAX-RS</code> section click the <code>@Path</code> endpoint <code>/hello</code> to see the result.</p>
 <p>Now for the fun part:<br>
 Using <code>odo</code> you can dynamically change your code and push it again without the need t o build a new container image! No dev magic involved:</p>
@@ -928,19 +928,19 @@ <h4>Click image to enlarge</h4>
     <div style="left: -1000px; overflow: scroll; position: absolute; top: -1000px; border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;">
       <div style="border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;"></div>
     </div>
-    <script src="https://devsecops-workshop.github.io/js/clipboard.min.js?1714740090"></script>
-    <script src="https://devsecops-workshop.github.io/js/perfect-scrollbar.min.js?1714740090"></script>
-    <script src="https://devsecops-workshop.github.io/js/perfect-scrollbar.jquery.min.js?1714740090"></script>
-    <script src="https://devsecops-workshop.github.io/js/jquery.sticky.js?1714740090"></script>
-    <script src="https://devsecops-workshop.github.io/js/featherlight.min.js?1714740090"></script>
-    <script src="https://devsecops-workshop.github.io/js/highlight.pack.js?1714740090"></script>
+    <script src="https://devsecops-workshop.github.io/js/clipboard.min.js?1714740158"></script>
+    <script src="https://devsecops-workshop.github.io/js/perfect-scrollbar.min.js?1714740158"></script>
+    <script src="https://devsecops-workshop.github.io/js/perfect-scrollbar.jquery.min.js?1714740158"></script>
+    <script src="https://devsecops-workshop.github.io/js/jquery.sticky.js?1714740158"></script>
+    <script src="https://devsecops-workshop.github.io/js/featherlight.min.js?1714740158"></script>
+    <script src="https://devsecops-workshop.github.io/js/highlight.pack.js?1714740158"></script>
     <script>hljs.initHighlightingOnLoad();</script>
-    <script src="https://devsecops-workshop.github.io/js/modernizr.custom-3.6.0.js?1714740090"></script>
-    <script src="https://devsecops-workshop.github.io/js/learn.js?1714740090"></script>
-    <script src="https://devsecops-workshop.github.io/js/hugo-learn.js?1714740090"></script>
+    <script src="https://devsecops-workshop.github.io/js/modernizr.custom-3.6.0.js?1714740158"></script>
+    <script src="https://devsecops-workshop.github.io/js/learn.js?1714740158"></script>
+    <script src="https://devsecops-workshop.github.io/js/hugo-learn.js?1714740158"></script>
     
         
-            <script src="https://devsecops-workshop.github.io/mermaid/mermaid.js?1714740090"></script>
+            <script src="https://devsecops-workshop.github.io/mermaid/mermaid.js?1714740158"></script>
         
         <script>
             mermaid.initialize({ startOnLoad: true });
diff --git a/4-outer-loop/index.html b/4-outer-loop/index.html
index c12743c..201f92c 100644
--- a/4-outer-loop/index.html
+++ b/4-outer-loop/index.html
@@ -12,22 +12,22 @@
     <title>Outer Loop :: DevSecOps Workshop</title>
 
     
-    <link href="https://devsecops-workshop.github.io/css/nucleus.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/fontawesome-all.min.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/hybrid.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/featherlight.min.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/perfect-scrollbar.min.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/auto-complete.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/atom-one-dark-reasonable.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/theme.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/tabs.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/hugo-theme.css?1714740090" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/nucleus.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/fontawesome-all.min.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/hybrid.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/featherlight.min.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/perfect-scrollbar.min.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/auto-complete.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/atom-one-dark-reasonable.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/theme.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/tabs.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/hugo-theme.css?1714740158" rel="stylesheet">
     
-    <link href="https://devsecops-workshop.github.io/css/theme-red.css?1714740090" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/theme-red.css?1714740158" rel="stylesheet">
     
     
 
-    <script src="https://devsecops-workshop.github.io/js/jquery-3.3.1.min.js?1714740090"></script>
+    <script src="https://devsecops-workshop.github.io/js/jquery-3.3.1.min.js?1714740158"></script>
 
     <style>
       :root #header + #content > #left > #rlblock_left{
@@ -61,14 +61,14 @@
     <span data-search-clear=""><i class="fas fa-times"></i></span>
 </div>
 
-<script type="text/javascript" src="https://devsecops-workshop.github.io/js/lunr.min.js?1714740090"></script>
-<script type="text/javascript" src="https://devsecops-workshop.github.io/js/auto-complete.js?1714740090"></script>
+<script type="text/javascript" src="https://devsecops-workshop.github.io/js/lunr.min.js?1714740158"></script>
+<script type="text/javascript" src="https://devsecops-workshop.github.io/js/auto-complete.js?1714740158"></script>
 <script type="text/javascript">
     
         var baseurl = "https:\/\/devsecops-workshop.github.io\/";
     
 </script>
-<script type="text/javascript" src="https://devsecops-workshop.github.io/js/search.js?1714740090"></script>
+<script type="text/javascript" src="https://devsecops-workshop.github.io/js/search.js?1714740158"></script>
 
     
   </div>
@@ -1049,19 +1049,19 @@ <h4>Click image to enlarge</h4>
     <div style="left: -1000px; overflow: scroll; position: absolute; top: -1000px; border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;">
       <div style="border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;"></div>
     </div>
-    <script src="https://devsecops-workshop.github.io/js/clipboard.min.js?1714740090"></script>
-    <script src="https://devsecops-workshop.github.io/js/perfect-scrollbar.min.js?1714740090"></script>
-    <script src="https://devsecops-workshop.github.io/js/perfect-scrollbar.jquery.min.js?1714740090"></script>
-    <script src="https://devsecops-workshop.github.io/js/jquery.sticky.js?1714740090"></script>
-    <script src="https://devsecops-workshop.github.io/js/featherlight.min.js?1714740090"></script>
-    <script src="https://devsecops-workshop.github.io/js/highlight.pack.js?1714740090"></script>
+    <script src="https://devsecops-workshop.github.io/js/clipboard.min.js?1714740158"></script>
+    <script src="https://devsecops-workshop.github.io/js/perfect-scrollbar.min.js?1714740158"></script>
+    <script src="https://devsecops-workshop.github.io/js/perfect-scrollbar.jquery.min.js?1714740158"></script>
+    <script src="https://devsecops-workshop.github.io/js/jquery.sticky.js?1714740158"></script>
+    <script src="https://devsecops-workshop.github.io/js/featherlight.min.js?1714740158"></script>
+    <script src="https://devsecops-workshop.github.io/js/highlight.pack.js?1714740158"></script>
     <script>hljs.initHighlightingOnLoad();</script>
-    <script src="https://devsecops-workshop.github.io/js/modernizr.custom-3.6.0.js?1714740090"></script>
-    <script src="https://devsecops-workshop.github.io/js/learn.js?1714740090"></script>
-    <script src="https://devsecops-workshop.github.io/js/hugo-learn.js?1714740090"></script>
+    <script src="https://devsecops-workshop.github.io/js/modernizr.custom-3.6.0.js?1714740158"></script>
+    <script src="https://devsecops-workshop.github.io/js/learn.js?1714740158"></script>
+    <script src="https://devsecops-workshop.github.io/js/hugo-learn.js?1714740158"></script>
     
         
-            <script src="https://devsecops-workshop.github.io/mermaid/mermaid.js?1714740090"></script>
+            <script src="https://devsecops-workshop.github.io/mermaid/mermaid.js?1714740158"></script>
         
         <script>
             mermaid.initialize({ startOnLoad: true });
diff --git a/404.html b/404.html
index db8fdc4..8b66b0e 100644
--- a/404.html
+++ b/404.html
@@ -9,15 +9,15 @@
   <title>404 Page not found</title>
 
    
-    <link href="https://devsecops-workshop.github.io/css/nucleus.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/fontawesome-all.min.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/hybrid.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/featherlight.min.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/perfect-scrollbar.min.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/theme.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/hugo-theme.css?1714740090" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/nucleus.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/fontawesome-all.min.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/hybrid.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/featherlight.min.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/perfect-scrollbar.min.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/theme.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/hugo-theme.css?1714740158" rel="stylesheet">
     
-      <link href="https://devsecops-workshop.github.io/css/theme-red.css?1714740090" rel="stylesheet">
+      <link href="https://devsecops-workshop.github.io/css/theme-red.css?1714740158" rel="stylesheet">
     
 <style>
     :root #header + #content > #left > #rlblock_left {
diff --git a/5-gitops/index.html b/5-gitops/index.html
index 9edd7a6..ab0c63b 100644
--- a/5-gitops/index.html
+++ b/5-gitops/index.html
@@ -12,22 +12,22 @@
     <title>Configure GitOps :: DevSecOps Workshop</title>
 
     
-    <link href="https://devsecops-workshop.github.io/css/nucleus.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/fontawesome-all.min.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/hybrid.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/featherlight.min.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/perfect-scrollbar.min.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/auto-complete.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/atom-one-dark-reasonable.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/theme.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/tabs.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/hugo-theme.css?1714740090" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/nucleus.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/fontawesome-all.min.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/hybrid.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/featherlight.min.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/perfect-scrollbar.min.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/auto-complete.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/atom-one-dark-reasonable.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/theme.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/tabs.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/hugo-theme.css?1714740158" rel="stylesheet">
     
-    <link href="https://devsecops-workshop.github.io/css/theme-red.css?1714740090" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/theme-red.css?1714740158" rel="stylesheet">
     
     
 
-    <script src="https://devsecops-workshop.github.io/js/jquery-3.3.1.min.js?1714740090"></script>
+    <script src="https://devsecops-workshop.github.io/js/jquery-3.3.1.min.js?1714740158"></script>
 
     <style>
       :root #header + #content > #left > #rlblock_left{
@@ -61,14 +61,14 @@
     <span data-search-clear=""><i class="fas fa-times"></i></span>
 </div>
 
-<script type="text/javascript" src="https://devsecops-workshop.github.io/js/lunr.min.js?1714740090"></script>
-<script type="text/javascript" src="https://devsecops-workshop.github.io/js/auto-complete.js?1714740090"></script>
+<script type="text/javascript" src="https://devsecops-workshop.github.io/js/lunr.min.js?1714740158"></script>
+<script type="text/javascript" src="https://devsecops-workshop.github.io/js/auto-complete.js?1714740158"></script>
 <script type="text/javascript">
     
         var baseurl = "https:\/\/devsecops-workshop.github.io\/";
     
 </script>
-<script type="text/javascript" src="https://devsecops-workshop.github.io/js/search.js?1714740090"></script>
+<script type="text/javascript" src="https://devsecops-workshop.github.io/js/search.js?1714740158"></script>
 
     
   </div>
@@ -591,7 +591,7 @@ <h4>Click image to enlarge</h4>
 </li>
 </ul>
 <h2 id="add-kustomize-and-git-push-tekton-task">Add Kustomize and Git Push Tekton Task</h2>
-<p>Let&rsquo;s add a new custom Tekton task to the <code>workshop-int</code> project that can update the Image <code>tag</code> via Kustomize after the build and then push the change to our git configuration repository.</p>
+<p>Let&rsquo;s add a new custom Tekton task to the <code>workshop-int</code> project that can update the Image <code>tag</code> via Kustomize after the build process completed and then push the change to our git configuration repository.</p>
 <p>We could add this through the OpenShift Web Console as well but to save time we will apply the file directly via the <code>oc</code> command.</p>
 <ul>
 <li>Go to your Web Terminal or open a new one.</li>
@@ -602,12 +602,12 @@ <h2 id="add-kustomize-and-git-push-tekton-task">Add Kustomize and Git Push Tekto
 <li>In the OpenShift Web Console switch back to project <code>workshop-int</code> and then go to <strong>Pipelines &gt; Tasks &gt; Tasks</strong> and have a look at the just imported task <code>git-update-deployment</code>. You should see the git commands how the configuration repository will be cloned, patched by <strong>Kustomize</strong> and then pushed again.</li>
 </ul>
 <h2 id="add-tekton-tasks-to-your-pipeline-to-promote-your-image-to-workshop-prod">Add Tekton Tasks to your Pipeline to Promote your Image to workshop-prod</h2>
-<p>So now we have a new Tekton Task in our task catalog to update a GitOps Git repository, but we still need to promote the actual image from out <code>workshop-int</code> to <code>workshop-prod</code> project. Otherwise the image will not be available for our deployment.</p>
+<p>So now we have a new Tekton Task in our task catalog to update a GitOps Git repository, but we still need to promote the actual image from our <code>workshop-int</code> to <code>workshop-prod</code> project. Otherwise the image will not be available for our deployment.</p>
 <ul>
 <li>In the <code>workshop_int</code> project, go to <strong>Pipelines &gt; Pipelines &gt; workshop</strong> and then YAML</li>
 </ul>
 
-<div class="notices tip" ><p>You can edit pipelines either directly in YAML or in the visual <strong>Pipeline Builder</strong>. We will see how to use the Builder later on so let&rsquo;s edit the YAML for now.</p>
+<div class="notices tip" ><p>You can edit pipelines either directly in YAML or in the visual <strong>Pipeline Builder</strong>. We will see how to use the Builder later on, so let&rsquo;s edit the YAML for now.</p>
 </div>
 
 <p>Add the new Task to your Pipeline by adding it to the YAML like this:</p>
@@ -674,7 +674,7 @@ <h4>Click image to enlarge</h4>
         </figcaption>
 </figure>
 
-<p>Now the pipeline is set. The last thing we need is authentication against the Gitea repository and the workshop-prod Quay org. We will add those from the <strong><em>start pipeline</em></strong> form next. Make sure to replace the <DOMAIN> placeholder if required.</p>
+<p>Now, the pipeline is set. The last thing we need is authentication against the Gitea repository and the workshop-prod Quay org. We will add those from the <strong><em>start pipeline</em></strong> form next. Make sure to replace the <DOMAIN> placeholder if required.</p>
 <h2 id="update-our-prod-stage-via-pipeline-and-gitops">Update our Prod Stage via Pipeline and GitOps</h2>
 <ul>
 <li>
@@ -998,19 +998,19 @@ <h4>Click image to enlarge</h4>
     <div style="left: -1000px; overflow: scroll; position: absolute; top: -1000px; border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;">
       <div style="border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;"></div>
     </div>
-    <script src="https://devsecops-workshop.github.io/js/clipboard.min.js?1714740090"></script>
-    <script src="https://devsecops-workshop.github.io/js/perfect-scrollbar.min.js?1714740090"></script>
-    <script src="https://devsecops-workshop.github.io/js/perfect-scrollbar.jquery.min.js?1714740090"></script>
-    <script src="https://devsecops-workshop.github.io/js/jquery.sticky.js?1714740090"></script>
-    <script src="https://devsecops-workshop.github.io/js/featherlight.min.js?1714740090"></script>
-    <script src="https://devsecops-workshop.github.io/js/highlight.pack.js?1714740090"></script>
+    <script src="https://devsecops-workshop.github.io/js/clipboard.min.js?1714740158"></script>
+    <script src="https://devsecops-workshop.github.io/js/perfect-scrollbar.min.js?1714740158"></script>
+    <script src="https://devsecops-workshop.github.io/js/perfect-scrollbar.jquery.min.js?1714740158"></script>
+    <script src="https://devsecops-workshop.github.io/js/jquery.sticky.js?1714740158"></script>
+    <script src="https://devsecops-workshop.github.io/js/featherlight.min.js?1714740158"></script>
+    <script src="https://devsecops-workshop.github.io/js/highlight.pack.js?1714740158"></script>
     <script>hljs.initHighlightingOnLoad();</script>
-    <script src="https://devsecops-workshop.github.io/js/modernizr.custom-3.6.0.js?1714740090"></script>
-    <script src="https://devsecops-workshop.github.io/js/learn.js?1714740090"></script>
-    <script src="https://devsecops-workshop.github.io/js/hugo-learn.js?1714740090"></script>
+    <script src="https://devsecops-workshop.github.io/js/modernizr.custom-3.6.0.js?1714740158"></script>
+    <script src="https://devsecops-workshop.github.io/js/learn.js?1714740158"></script>
+    <script src="https://devsecops-workshop.github.io/js/hugo-learn.js?1714740158"></script>
     
         
-            <script src="https://devsecops-workshop.github.io/mermaid/mermaid.js?1714740090"></script>
+            <script src="https://devsecops-workshop.github.io/mermaid/mermaid.js?1714740158"></script>
         
         <script>
             mermaid.initialize({ startOnLoad: true });
diff --git a/categories/index.html b/categories/index.html
index dda40f3..0698bb9 100644
--- a/categories/index.html
+++ b/categories/index.html
@@ -12,22 +12,22 @@
     <title>Categories :: DevSecOps Workshop</title>
 
     
-    <link href="https://devsecops-workshop.github.io/css/nucleus.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/fontawesome-all.min.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/hybrid.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/featherlight.min.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/perfect-scrollbar.min.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/auto-complete.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/atom-one-dark-reasonable.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/theme.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/tabs.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/hugo-theme.css?1714740090" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/nucleus.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/fontawesome-all.min.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/hybrid.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/featherlight.min.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/perfect-scrollbar.min.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/auto-complete.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/atom-one-dark-reasonable.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/theme.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/tabs.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/hugo-theme.css?1714740158" rel="stylesheet">
     
-    <link href="https://devsecops-workshop.github.io/css/theme-red.css?1714740090" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/theme-red.css?1714740158" rel="stylesheet">
     
     
 
-    <script src="https://devsecops-workshop.github.io/js/jquery-3.3.1.min.js?1714740090"></script>
+    <script src="https://devsecops-workshop.github.io/js/jquery-3.3.1.min.js?1714740158"></script>
 
     <style>
       :root #header + #content > #left > #rlblock_left{
@@ -61,14 +61,14 @@
     <span data-search-clear=""><i class="fas fa-times"></i></span>
 </div>
 
-<script type="text/javascript" src="https://devsecops-workshop.github.io/js/lunr.min.js?1714740090"></script>
-<script type="text/javascript" src="https://devsecops-workshop.github.io/js/auto-complete.js?1714740090"></script>
+<script type="text/javascript" src="https://devsecops-workshop.github.io/js/lunr.min.js?1714740158"></script>
+<script type="text/javascript" src="https://devsecops-workshop.github.io/js/auto-complete.js?1714740158"></script>
 <script type="text/javascript">
     
         var baseurl = "https:\/\/devsecops-workshop.github.io\/";
     
 </script>
-<script type="text/javascript" src="https://devsecops-workshop.github.io/js/search.js?1714740090"></script>
+<script type="text/javascript" src="https://devsecops-workshop.github.io/js/search.js?1714740158"></script>
 
     
   </div>
@@ -753,19 +753,19 @@ <h1>
     <div style="left: -1000px; overflow: scroll; position: absolute; top: -1000px; border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;">
       <div style="border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;"></div>
     </div>
-    <script src="https://devsecops-workshop.github.io/js/clipboard.min.js?1714740090"></script>
-    <script src="https://devsecops-workshop.github.io/js/perfect-scrollbar.min.js?1714740090"></script>
-    <script src="https://devsecops-workshop.github.io/js/perfect-scrollbar.jquery.min.js?1714740090"></script>
-    <script src="https://devsecops-workshop.github.io/js/jquery.sticky.js?1714740090"></script>
-    <script src="https://devsecops-workshop.github.io/js/featherlight.min.js?1714740090"></script>
-    <script src="https://devsecops-workshop.github.io/js/highlight.pack.js?1714740090"></script>
+    <script src="https://devsecops-workshop.github.io/js/clipboard.min.js?1714740158"></script>
+    <script src="https://devsecops-workshop.github.io/js/perfect-scrollbar.min.js?1714740158"></script>
+    <script src="https://devsecops-workshop.github.io/js/perfect-scrollbar.jquery.min.js?1714740158"></script>
+    <script src="https://devsecops-workshop.github.io/js/jquery.sticky.js?1714740158"></script>
+    <script src="https://devsecops-workshop.github.io/js/featherlight.min.js?1714740158"></script>
+    <script src="https://devsecops-workshop.github.io/js/highlight.pack.js?1714740158"></script>
     <script>hljs.initHighlightingOnLoad();</script>
-    <script src="https://devsecops-workshop.github.io/js/modernizr.custom-3.6.0.js?1714740090"></script>
-    <script src="https://devsecops-workshop.github.io/js/learn.js?1714740090"></script>
-    <script src="https://devsecops-workshop.github.io/js/hugo-learn.js?1714740090"></script>
+    <script src="https://devsecops-workshop.github.io/js/modernizr.custom-3.6.0.js?1714740158"></script>
+    <script src="https://devsecops-workshop.github.io/js/learn.js?1714740158"></script>
+    <script src="https://devsecops-workshop.github.io/js/hugo-learn.js?1714740158"></script>
     
         
-            <script src="https://devsecops-workshop.github.io/mermaid/mermaid.js?1714740090"></script>
+            <script src="https://devsecops-workshop.github.io/mermaid/mermaid.js?1714740158"></script>
         
         <script>
             mermaid.initialize({ startOnLoad: true });
diff --git a/index.html b/index.html
index 5a6ac3d..1ecb283 100644
--- a/index.html
+++ b/index.html
@@ -12,22 +12,22 @@
     <title> :: DevSecOps Workshop</title>
 
     
-    <link href="https://devsecops-workshop.github.io/css/nucleus.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/fontawesome-all.min.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/hybrid.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/featherlight.min.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/perfect-scrollbar.min.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/auto-complete.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/atom-one-dark-reasonable.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/theme.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/tabs.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/hugo-theme.css?1714740090" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/nucleus.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/fontawesome-all.min.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/hybrid.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/featherlight.min.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/perfect-scrollbar.min.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/auto-complete.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/atom-one-dark-reasonable.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/theme.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/tabs.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/hugo-theme.css?1714740158" rel="stylesheet">
     
-    <link href="https://devsecops-workshop.github.io/css/theme-red.css?1714740090" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/theme-red.css?1714740158" rel="stylesheet">
     
     
 
-    <script src="https://devsecops-workshop.github.io/js/jquery-3.3.1.min.js?1714740090"></script>
+    <script src="https://devsecops-workshop.github.io/js/jquery-3.3.1.min.js?1714740158"></script>
 
     <style>
       :root #header + #content > #left > #rlblock_left{
@@ -61,14 +61,14 @@
     <span data-search-clear=""><i class="fas fa-times"></i></span>
 </div>
 
-<script type="text/javascript" src="https://devsecops-workshop.github.io/js/lunr.min.js?1714740090"></script>
-<script type="text/javascript" src="https://devsecops-workshop.github.io/js/auto-complete.js?1714740090"></script>
+<script type="text/javascript" src="https://devsecops-workshop.github.io/js/lunr.min.js?1714740158"></script>
+<script type="text/javascript" src="https://devsecops-workshop.github.io/js/auto-complete.js?1714740158"></script>
 <script type="text/javascript">
     
         var baseurl = "https:\/\/devsecops-workshop.github.io\/";
     
 </script>
-<script type="text/javascript" src="https://devsecops-workshop.github.io/js/search.js?1714740090"></script>
+<script type="text/javascript" src="https://devsecops-workshop.github.io/js/search.js?1714740158"></script>
 
     
   </div>
@@ -728,19 +728,19 @@ <h2 id="credits--contribution">Credits &amp; Contribution</h2>
     <div style="left: -1000px; overflow: scroll; position: absolute; top: -1000px; border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;">
       <div style="border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;"></div>
     </div>
-    <script src="https://devsecops-workshop.github.io/js/clipboard.min.js?1714740090"></script>
-    <script src="https://devsecops-workshop.github.io/js/perfect-scrollbar.min.js?1714740090"></script>
-    <script src="https://devsecops-workshop.github.io/js/perfect-scrollbar.jquery.min.js?1714740090"></script>
-    <script src="https://devsecops-workshop.github.io/js/jquery.sticky.js?1714740090"></script>
-    <script src="https://devsecops-workshop.github.io/js/featherlight.min.js?1714740090"></script>
-    <script src="https://devsecops-workshop.github.io/js/highlight.pack.js?1714740090"></script>
+    <script src="https://devsecops-workshop.github.io/js/clipboard.min.js?1714740158"></script>
+    <script src="https://devsecops-workshop.github.io/js/perfect-scrollbar.min.js?1714740158"></script>
+    <script src="https://devsecops-workshop.github.io/js/perfect-scrollbar.jquery.min.js?1714740158"></script>
+    <script src="https://devsecops-workshop.github.io/js/jquery.sticky.js?1714740158"></script>
+    <script src="https://devsecops-workshop.github.io/js/featherlight.min.js?1714740158"></script>
+    <script src="https://devsecops-workshop.github.io/js/highlight.pack.js?1714740158"></script>
     <script>hljs.initHighlightingOnLoad();</script>
-    <script src="https://devsecops-workshop.github.io/js/modernizr.custom-3.6.0.js?1714740090"></script>
-    <script src="https://devsecops-workshop.github.io/js/learn.js?1714740090"></script>
-    <script src="https://devsecops-workshop.github.io/js/hugo-learn.js?1714740090"></script>
+    <script src="https://devsecops-workshop.github.io/js/modernizr.custom-3.6.0.js?1714740158"></script>
+    <script src="https://devsecops-workshop.github.io/js/learn.js?1714740158"></script>
+    <script src="https://devsecops-workshop.github.io/js/hugo-learn.js?1714740158"></script>
     
         
-            <script src="https://devsecops-workshop.github.io/mermaid/mermaid.js?1714740090"></script>
+            <script src="https://devsecops-workshop.github.io/mermaid/mermaid.js?1714740158"></script>
         
         <script>
             mermaid.initialize({ startOnLoad: true });
diff --git a/index.json b/index.json
index f093c66..56210c0 100644
--- a/index.json
+++ b/index.json
@@ -25,7 +25,7 @@
 	"title": "Inner Loop",
 	"tags": [],
 	"description": "",
-	"content": "In this part of the workshop you\u0026rsquo;ll experience how modern software development using the OpenShift tooling can be done in a fast, iterative way. Inner loop here means this is the way, sorry, process, for developers to try out new things and quickly change and test their code on OpenShift without having to build new images all the time or being a Kubernetes expert. Install and Prepare Red Hat OpenShift Dev Spaces OpenShift Dev Spaces is a browser-based IDE for Cloud Native Development. All the heavy lifting is done through a container running your workspace on OpenShift. All you really need is a laptop. You can easily switch and setup a customized environment, plugin, build tools and runtimes. So switching from one project context to another is as easy a switching a website. No more endless installation and configuration marathons on your dev laptop. It is already part of your OpenShift subscription. If you want to find out more have a look here\n Install the Red Hat OpenShift Dev Spaces Operator from OperatorHub with default settings Go to Installed Operators -\u0026gt; Red Hat OpenShift Dev Spaces and create a new instance (Red Hat OpenShift Dev Spaces instance Specification) using the default settings in the project openshift-operators Wait until deployment has finished. This may take a couple of minutes as several components will be deployed. Once the instance status is ready (You can check the YAML of the instance: status \u0026gt; chePhase: Active), look up the devspaces Route in the openshift-workspaces project (If you can see the openshift-workspaces, you may need to toggle the Show default project button). Open the link in a new browser tab, click on Log in with OpenShift and log in with your OpenShift credentials Allow selected permissions  We could create a workspace from one of the templates that come with Dev Spaces, but we want to use a customized workspace with some additionally defined plugins in a v2 devfile in our git repo. With devfiles you can share a complete workspace setup and with the click of a link and you will end up in a fully configured project in your browser.\n You will now need to access the Gitea repository where your Quarkus app resides and specifically get the path to the devfile.\n Find the Gitea URL by selecting the git project in openshift and then Networking \u0026gt; Routes Click on the URL and login to Gitea with  username : gitea password : gitea   On the right side click on the repository gitea/quarkus-build-options Then click on the devfile devspaces_devfile.yml Now click on button Raw (or Originalversion in German) and copy this URL  It is important that you have the URL to the Raw version, otherwise DevSpace will recieve a website that it cannot parse.\nNow back in your DevSpaces Workspace :\n In the left menu click on Create Workspace Paste the full URL of the devfile that you just copied into the Git Repo URL field and click Create \u0026amp; Open    Click image to enlarge    You\u0026rsquo;ll get into the Creating a workspace \u0026hellip; view, give the workspace containers some time to spin up. If a popup appears asking you to \u0026ldquo;trust the authors of the files\u0026rdquo; click Yes, I trust the authors   Click image to enlarge     When your workspace has finally started, have a good look around in the UI. It should look familiar if you have ever worked with VSCode or similar IDEs.\nWhile working with Dev Spaces make sure you have AdBlockers disabled, you are not on a VPN and a have good internet connection to ensure a stable setup. If you are facing any issues try to reload the Browser window. If that doesn\u0026rsquo;t help restart the workspace in the main DevSpaces Web Console under Workspaces and then menu Restart Workspace\n Clone the Quarkus Application Code As an example you\u0026rsquo;ll create a new Java application. You don\u0026rsquo;t need to have prior experience programming in Java as this will be kept really simple.\nWe will use a Java application based on the Quarkus stack. Quarkus enables you to create much smaller and faster containerized Java applications than ever before. You can even transcompile these apps to native Linux binaries that start blazingly fast. The app that we will use is just a basic example created with the Quarkus Generator with a simple RESTful API that answers to http requests. But at the end of the day this setup will work with any Java application.\nFun fact: Every OpenShift Subscription already provides a Quarkus Subscription.\n Let\u0026rsquo;s clone our project into our workspace :\n Bring up your OpenShift DevSpaces in your browser Click on the the \u0026ldquo;Hamburger\u0026rdquo; menu in the top left, then View \u0026gt; Command Palette  In the Command Palette prompt that appears on the top, start typing git clone until you can select the Git: Clone item   Click image to enlarge    Enter the Git URL to your Gitea Repository (You can copy the URL by clicking on the clipboard icon in Gitea) and press enter   Click image to enlarge      In the following dialog Choose a folder to clone \u0026hellip; Click the button OK In the following dialog when asked how to open the code, click on Open   Click image to enlarge    The windows will briefly reload and then you will be in the cloned project folder You may have to check \u0026ldquo;Trust the authors \u0026hellip;\u0026rdquo; and click Yes, I trust the authors again. Last time, promise :)   Click image to enlarge     Access OpenShift and Create the Development Stage Project Now we want to create a new OpenShift project for our app:\n Open a terminal in your DevSpaces IDE  In the top left \u0026lsquo;hamburger\u0026rsquo; menu click on Terminal \u0026gt; New Terminal)   The oc OpenShift cli client is already installed and you are already logged into the cluster So go ahead and create a new project workshop-dev  oc new-project workshop-dev Use odo to Deploy and Update our Application odo or \u0026lsquo;OpenShift do\u0026rsquo; is a cli that enables developers to quickly get started with cloud native app development without being a Kubernetes expert. It offers support for multiple runtimes and you can easily setup microservice components, push code changes into running containers and debug remotely with just a few simple commands. To find out more, have look here\nFirst we need to make sure we are in the folder of the cloned project.\nEnter the following command in the terminal:\npwd if you are not in the /projects/quarkus-build-options folder, change into with the cd command\nodo is smart enough to figure out what programming language and frameworks you are using. So let\u0026rsquo;s let initialize our project\nodo init  You can then opt-into telemetry (Y/n) A matching Quarkus DevFile is found in the odo repository. Choose Y to download You can select a container in which odo will be started. Hit Enter (None) As componenten name keep the suggestion. Hit Enter  odo is now intialized for your app. Let\u0026rsquo;s deploy the app to openshift in odo dev mode\nodo dev This will compile the app, start a pod in the OpenShift project and inject the app.\nThere will be a couple of popups in the bottom right corner\n \u0026ldquo;A new process is listening \u0026hellip;\u0026rdquo; -\u0026gt; Choose Yes \u0026ldquo;Redirect is not enabled \u0026hellip;\u0026rdquo; \u0026ndash;\u0026gt; Click on Open in New Tab \u0026ldquo;Do you want VS Code - Open Source to open an external website\u0026rdquo; \u0026ndash;\u0026gt; Choose Open  A new tab will open and show the webpage of your app. You may have to wait a reload in a few seconds.\nTo test the app:\nYour app should be displayed as a simple web page. In the RESTEasy JAX-RS section click the @Path endpoint /hello to see the result.\nNow for the fun part:\nUsing odo you can dynamically change your code and push it again without the need t o build a new container image! No dev magic involved:\n  In your DevWorkspace on the left, expand the file tree to open file src/main/java/org/acme/GreetingRessource.java and change the string \u0026ldquo;Hello RESTEasy\u0026rdquo; to \u0026ldquo;Hello Workshop\u0026rdquo; (DevSpaces auto saves every edit directly. No need to save the file manually.)\n  And reload the app webpage.\n  Bam! The change should be there in a matter of seconds\n  Architecture recap   Click image to enlarge   "
+	"content": "In this part of the workshop you\u0026rsquo;ll experience how modern software development using the OpenShift tooling can be done in a fast, iterative way. Inner loop here means this is the way, sorry, process, for developers to try out new things and quickly change and test their code on OpenShift without having to build new images all the time or being a Kubernetes expert. Install and Prepare Red Hat OpenShift Dev Spaces OpenShift Dev Spaces is a browser-based IDE for Cloud Native Development. All the heavy lifting is done through a container running your workspace on OpenShift. All you really need is a laptop. You can easily switch and setup a customized environment, plugin, build tools and runtimes. So switching from one project context to another is as easy a switching a website. No more endless installation and configuration marathons on your dev laptop. It is already part of your OpenShift subscription. If you want to find out more have a look here\n Install the Red Hat OpenShift Dev Spaces Operator from OperatorHub with default settings Go to Installed Operators -\u0026gt; Red Hat OpenShift Dev Spaces and create a new instance (Red Hat OpenShift Dev Spaces instance Specification) using the default settings in the project openshift-operators Wait until deployment has finished. This may take a couple of minutes as several components will be deployed. Once the instance status is ready (You can check the YAML of the instance: status \u0026gt; chePhase: Active), look up the devspaces Route in the openshift-workspaces project (If you can see the openshift-workspaces, you may need to toggle the Show default project button). Open the link in a new browser tab, click on Log in with OpenShift and log in with your OpenShift credentials Allow selected permissions  We could create a workspace from one of the templates that come with Dev Spaces, but we want to use a customized workspace with some additionally defined plugins in a v2 devfile in our git repo. With devfiles you can share a complete workspace setup and with the click of a link and you will end up in a fully configured project in your browser.\n You will now need to access the Gitea repository where your Quarkus app resides and specifically get the path to the devfile.\n Find the Gitea URL by selecting the git project in openshift and then Networking \u0026gt; Routes Click on the URL and login to Gitea with  username : gitea password : gitea   On the right side click on the repository gitea/quarkus-build-options Then click on the devfile devspaces_devfile.yml Now click on button Raw (or Originalformat in German) and copy this URL  It is important that you have the URL to the Raw version, otherwise DevSpace will recieve a website that it cannot parse.\nNow back in your DevSpaces Workspace :\n In the left menu click on Create Workspace Paste the full URL of the devfile that you just copied into the Git Repo URL field and click Create \u0026amp; Open    Click image to enlarge    You\u0026rsquo;ll get into the Creating a workspace \u0026hellip; view, give the workspace containers some time to spin up. If a popup appears asking you to \u0026ldquo;trust the authors of the files\u0026rdquo; click Yes, I trust the authors   Click image to enlarge     When your workspace has finally started, have a good look around in the UI. It should look familiar if you have ever worked with VSCode or similar IDEs.\nWhile working with Dev Spaces make sure you have AdBlockers disabled, you are not on a VPN and a have good internet connection to ensure a stable setup. If you are facing any issues try to reload the Browser window. If that doesn\u0026rsquo;t help restart the workspace in the main DevSpaces Web Console under Workspaces and then menu Restart Workspace\n Clone the Quarkus Application Code As an example you\u0026rsquo;ll create a new Java application. You don\u0026rsquo;t need to have prior experience programming in Java as this will be kept really simple.\nWe will use a Java application based on the Quarkus stack. Quarkus enables you to create much smaller and faster containerized Java applications than ever before. You can even transcompile these apps to native Linux binaries that start blazingly fast. The app that we will use is just a basic example created with the Quarkus Generator with a simple RESTful API that answers to http requests. But at the end of the day this setup will work with any Java application.\nFun fact: Every OpenShift Subscription already provides a Quarkus Subscription.\n Let\u0026rsquo;s clone our project into our workspace :\n Bring up your OpenShift DevSpaces in your browser Click on the the \u0026ldquo;Hamburger\u0026rdquo; menu in the top left, then View \u0026gt; Command Palette  In the Command Palette prompt that appears on the top, start typing git clone until you can select the Git: Clone item   Click image to enlarge    Enter the Git URL to your Gitea Repository (You can copy the URL by clicking on the clipboard icon in Gitea) and press enter   Click image to enlarge      In the following dialog Choose a folder to clone \u0026hellip;, move up the dirs and select the /projects dir, then click the button OK In the following dialog when asked how to open the code, click on Open   Click image to enlarge    The windows will briefly reload and then you will be in the cloned project folder You may have to check \u0026ldquo;Trust the authors \u0026hellip;\u0026rdquo; and click Yes, I trust the authors again. Last time, promise :)   Click image to enlarge     Access OpenShift and Create the Development Stage Project Now we want to create a new OpenShift project for our app:\n Open a terminal in your DevSpaces IDE  In the top left \u0026lsquo;hamburger\u0026rsquo; menu click on Terminal \u0026gt; New Terminal)   The oc OpenShift cli client is already installed and you are already logged into the cluster So go ahead and create a new project workshop-dev  oc new-project workshop-dev Use odo to Deploy and Update our Application odo or \u0026lsquo;OpenShift do\u0026rsquo; is a cli that enables developers to quickly get started with cloud native app development without being a Kubernetes expert. It offers support for multiple runtimes and you can easily setup microservice components, push code changes into running containers and debug remotely with just a few simple commands. To find out more, have look here\nFirst we need to make sure we are in the folder of the cloned project.\nEnter the following command in the terminal:\npwd if you are not in the /projects/quarkus-build-options folder, change into with the cd command\nodo is smart enough to figure out what programming language and frameworks you are using. So let\u0026rsquo;s let initialize our project\nodo init  You can then opt-into telemetry (Y/n) A matching Quarkus DevFile is found in the odo repository. Choose Y to download You can select a container in which odo will be started. Hit Enter (None) As componenten name keep the suggestion. Hit Enter  odo is now intialized for your app. Let\u0026rsquo;s deploy the app to openshift in odo dev mode\nodo dev This will compile the app, start a pod in the OpenShift project and inject the app.\nThere will be a couple of popups in the bottom right corner (Click on all of them as explained below)\n \u0026ldquo;A new process is listening \u0026hellip;\u0026rdquo; -\u0026gt; Choose Yes \u0026ldquo;Redirect is not enabled \u0026hellip;\u0026rdquo; \u0026ndash;\u0026gt; Click on Open in New Tab \u0026ldquo;Do you want VS Code - Open Source to open an external website\u0026rdquo; \u0026ndash;\u0026gt; Choose Open  New tabs will open. One with the DevFile Editor and one showing the Quarkus webpage of your app. You may have to wait a reload in a few seconds.\nTo test the app in the Quarkus App tab:\nYour app should be displayed as a simple web page. In the RESTEasy JAX-RS section click the @Path endpoint /hello to see the result.\nNow for the fun part:\nUsing odo you can dynamically change your code and push it again without the need t o build a new container image! No dev magic involved:\n  In your DevWorkspace on the left, expand the file tree to open file src/main/java/org/acme/GreetingRessource.java and change the string \u0026ldquo;Hello RESTEasy\u0026rdquo; to \u0026ldquo;Hello Workshop\u0026rdquo; (DevSpaces auto saves every edit directly. No need to save the file manually.)\n  And reload the app webpage.\n  Bam! The change should be there in a matter of seconds\n  Architecture recap   Click image to enlarge   "
 },
 {
 	"uri": "https://devsecops-workshop.github.io/4-outer-loop/",
@@ -39,14 +39,14 @@
 	"title": "Configure GitOps",
 	"tags": [],
 	"description": "",
-	"content": "Now that our CI/CD build and integration stage is ready we could promote the app version directly to a production stage. But with the help of the GitOps approach, we can leverage our Git system to handle promotion that is tracked through commits and can deploy and configure the whole production environment. This stage is just too critical to configure manually and without an audit.\nInstall OpenShift GitOps So let\u0026rsquo;s start be installing the OpenShift GitOps Operator based on the project ArgoCD.\n Install the Red Hat OpenShift GitOps Operator from OperatorHub with the default settings The installation of the GitOps Operator will give you a clusterwide ArgoCD instance available at the link in the top right menu, but since we want to have an instance to manage just our prod project we will create another ArgoCD instance in that specific project.\n  You should already have created an OpenShift Project workshop-prod With the project workshop-prod selected in the top menu click on Installed Operators and then Red Hat OpenShift GitOps. On the ArgoCD \u0026ldquo;tile\u0026rdquo; click on Create instance to create an ArgoCD instance in the workshop-prod project.    Click image to enlarge    Keep the settings as they are and click Create  Check the GitOps Config Repository We already have a second repository, called openshift-gitops-getting-started in Gitea that holds the required Gitops yaml resources. We will use this repo to push changes to our workshop-prod enivronment.\nHave a quick look at the structure of this git project:\napp - contains yaml files for the deployment, service and route resources needed by our application. These will be applied to the cluster. There is also a kustomization.yaml defining that kustomize layers will be applied to all yamls\nenvironments/dev - contains the kustomization.yaml which will be modified by our builds with new Image versions. ArgoCD will pick up these changes and trigger new deployments.\nSetup the GitOps Project in ArgoCD Let\u0026rsquo;s setup the project that tells ArgoCD to watch our configuration repository and update resources in the workshop-prod project accordingly.\n Find the local ArgoCD URL (not the global instance) by going to Networking \u0026gt; Routes in namespace workshop-prod Open the ArgoCD website, ignoring the certificate warning Don\u0026rsquo;t login with OpenShift but with username and password  User is admin and password will be in Secret argocd-cluster in the Project workspace-prod    ArgoCD works with the concept of Applications. We will create an Application and point it to the configuration Git repository. ArgoCD will look for Kubernetes yaml files in the repository and path and deploy them to the defined project. Additionally, ArgoCD will also react to changes to the repository and reflect these to the project. You can also enable self-healing to prevent configuration drift. If you want find out more about OpenShift GitOps have look here.\n Create Application  Click the Applications icon on the left Click Create Application Application Name: workshop Project: default SYNC POLICY: Automatic Repository URL: Copy the URL of your config repo openshift-gitops-getting-started from Gitea Path: environments/dev Cluster URL: https://kubernetes.default.svc Namespace: workshop-prod Click Create Click on Sync and then Synchronize to manually trigger the first sync    Watch the resources (Deployment, Service, Route) get rolled out to the project workshop-prod. Notice, we also scaling our app to 2 pods in the production stage as we want some high availability. But the actual deployment will not succeed as shown by the \u0026lsquo;broken heart\u0026rsquo; icons!\nSince we have not published our image to the Quay workshop-prod repository the initial Deployment will try to roll out non existant image from Quay. Once the first pipeline run is complete, our newly built image will be replaced in the Deployment and rolled out.\n Our complete production stage is now configured and controlled through GitOps. But how do we tell ArgoCD that there is a new version of our app to deploy? Well, we will add a step to our build pipeline updating the configuration repository.\nAs we do not want to modify our original repository file we will use a tool called Kustomize that can add incremental change layers to YAML files. Since ArgoCD permanently watches this repository, it will pick up these Kustomize changes.\nIt is also possible to update the repository with a Pull request. Then you have an approval process for your production deployment.\n Initialize the workshop-prod/workshop Repository in Quay We will need to initialize the workshop-prod/workshop in Quay so the robo user will be able to push images there later on.\n In Quay select the organization openshift_workshop-prod on the right Click on + Create New Repository on the top left   Click image to enlarge    Make sure to select openshift_workshop-prod as Organization Enter workshop as repo name Set the repo to Public Click Create Public Repository   Click image to enlarge     Add Kustomize and Git Push Tekton Task Let\u0026rsquo;s add a new custom Tekton task to the workshop-int project that can update the Image tag via Kustomize after the build and then push the change to our git configuration repository.\nWe could add this through the OpenShift Web Console as well but to save time we will apply the file directly via the oc command.\n Go to your Web Terminal or open a new one. Apply the task via YAML:  oc create -f https://raw.githubusercontent.com/devsecops-workshop/yaml/main/tekton-kustomize.yml  In the OpenShift Web Console switch back to project workshop-int and then go to Pipelines \u0026gt; Tasks \u0026gt; Tasks and have a look at the just imported task git-update-deployment. You should see the git commands how the configuration repository will be cloned, patched by Kustomize and then pushed again.  Add Tekton Tasks to your Pipeline to Promote your Image to workshop-prod So now we have a new Tekton Task in our task catalog to update a GitOps Git repository, but we still need to promote the actual image from out workshop-int to workshop-prod project. Otherwise the image will not be available for our deployment.\n In the workshop_int project, go to Pipelines \u0026gt; Pipelines \u0026gt; workshop and then YAML  You can edit pipelines either directly in YAML or in the visual Pipeline Builder. We will see how to use the Builder later on so let\u0026rsquo;s edit the YAML for now.\n Add the new Task to your Pipeline by adding it to the YAML like this:\n First we will add a new Pipeline Parameter \u0026lsquo;GIT_CONFIG_REPO\u0026rsquo; at the beginning of the pipeline and set it by default to our GitOps configuration repository (This will be updated by the Pipeline and then trigger ArgoCD to deploy to Production) So in the YAML view at the end of the spec \u0026gt; params section add the following (if the \u0026lt;DOMAIN\u0026gt; placeholder hasn\u0026rsquo;t been replaced automatically, do it manually):  - default: \u0026gt;- https://repository-git.apps.\u0026lt;DOMAIN\u0026gt;/gitea/openshift-gitops-getting-started.git name: GIT_CONFIG_REPO type: string  Next insert the new tasks at the tasks level right after the deploy task We will map the Pipeline parameter GIT_CONFIG_REPO to the Task parameter GIT_REPOSITORY Make sure to fix indentation after pasting into the YAML!  In the OpenShift YAML viewer/editor you can mark multiple lines and use tab to indent this lines for one step.\n - name: skopeo-copy params: - name: srcImageURL value: \u0026#34;docker://$(params.QUAY_URL)/openshift_workshop-int/workshop:latest\u0026#34; - name: destImageURL value: \u0026#34;docker://$(params.QUAY_URL)/openshift_workshop-prod/workshop:latest\u0026#34; - name: srcTLSverify value: \u0026#34;false\u0026#34; - name: destTLSverify value: \u0026#34;false\u0026#34; runAfter: - build taskRef: kind: ClusterTask name: skopeo-copy workspaces: - name: images-url workspace: workspace - name: git-update-deployment params: - name: GIT_REPOSITORY value: $(params.GIT_CONFIG_REPO) - name: CURRENT_IMAGE value: \u0026#34;quay.io/nexus6/hello-microshift:1.0.0-SNAPSHOT\u0026#34; - name: NEW_IMAGE value: $(params.QUAY_URL)/openshift_workshop-prod/workshop - name: NEW_DIGEST value: $(tasks.build.results.IMAGE_DIGEST) - name: KUSTOMIZATION_PATH value: environments/dev runAfter: - skopeo-copy taskRef: kind: Task name: git-update-deployment workspaces: - name: workspace workspace: workspace The Pipeline should now look like this. Notice that the new tasks runs in parallel to the deploy task\n  Click image to enlarge   Now the pipeline is set. The last thing we need is authentication against the Gitea repository and the workshop-prod Quay org. We will add those from the start pipeline form next. Make sure to replace the  placeholder if required.\nUpdate our Prod Stage via Pipeline and GitOps   Click on Pipeline Start\n In the form go down and expand Show credential options Click Add Secret, then enter  Secret name : quay-workshop-prod-token Access to: Image Registry Authentication type: Basic Authentication Server URL: quay-quay-quay.apps.\u0026lt;DOMAIN\u0026gt;/openshift_workshop-prod Username: openshift_workshop-prod+builder Password : (Retrieve this from the Quay organization openshift_workshop-prod robo account openshift_workshop-prod+builder as before) Click the checkmark   Then click Add Secret again  Secret name : gitea-secret Access to: Git Server Authentication type: Basic Authentication Server URL: https://repository-git.apps.\u0026lt;DOMAIN\u0026gt;/gitea/openshift-gitops-getting-started.git (replace url if necassary) Username: gitea Password : gitea Click the checkmark      Run the pipeline by clicking Start and see that in your Gitea configuration repository the file /environment/dev/kustomize.yaml is updated with the new image version Notice that the deploy and the git-update steps now run in parallel. This is one of the strength of Tekton. It can scale natively with pods on OpenShift.\n   This will tell ArgoCD to update the Deployment with this new image version\n  Check that the new image is rolled out sucessfully now (you may need to sync manually in ArgoCD to speed things up)\n  Architecture recap   Click image to enlarge   "
+	"content": "Now that our CI/CD build and integration stage is ready we could promote the app version directly to a production stage. But with the help of the GitOps approach, we can leverage our Git system to handle promotion that is tracked through commits and can deploy and configure the whole production environment. This stage is just too critical to configure manually and without an audit.\nInstall OpenShift GitOps So let\u0026rsquo;s start be installing the OpenShift GitOps Operator based on the project ArgoCD.\n Install the Red Hat OpenShift GitOps Operator from OperatorHub with the default settings The installation of the GitOps Operator will give you a clusterwide ArgoCD instance available at the link in the top right menu, but since we want to have an instance to manage just our prod project we will create another ArgoCD instance in that specific project.\n  You should already have created an OpenShift Project workshop-prod With the project workshop-prod selected in the top menu click on Installed Operators and then Red Hat OpenShift GitOps. On the ArgoCD \u0026ldquo;tile\u0026rdquo; click on Create instance to create an ArgoCD instance in the workshop-prod project.    Click image to enlarge    Keep the settings as they are and click Create  Check the GitOps Config Repository We already have a second repository, called openshift-gitops-getting-started in Gitea that holds the required Gitops yaml resources. We will use this repo to push changes to our workshop-prod enivronment.\nHave a quick look at the structure of this git project:\napp - contains yaml files for the deployment, service and route resources needed by our application. These will be applied to the cluster. There is also a kustomization.yaml defining that kustomize layers will be applied to all yamls\nenvironments/dev - contains the kustomization.yaml which will be modified by our builds with new Image versions. ArgoCD will pick up these changes and trigger new deployments.\nSetup the GitOps Project in ArgoCD Let\u0026rsquo;s setup the project that tells ArgoCD to watch our configuration repository and update resources in the workshop-prod project accordingly.\n Find the local ArgoCD URL (not the global instance) by going to Networking \u0026gt; Routes in namespace workshop-prod Open the ArgoCD website, ignoring the certificate warning Don\u0026rsquo;t login with OpenShift but with username and password  User is admin and password will be in Secret argocd-cluster in the Project workspace-prod    ArgoCD works with the concept of Applications. We will create an Application and point it to the configuration Git repository. ArgoCD will look for Kubernetes yaml files in the repository and path and deploy them to the defined project. Additionally, ArgoCD will also react to changes to the repository and reflect these to the project. You can also enable self-healing to prevent configuration drift. If you want find out more about OpenShift GitOps have look here.\n Create Application  Click the Applications icon on the left Click Create Application Application Name: workshop Project: default SYNC POLICY: Automatic Repository URL: Copy the URL of your config repo openshift-gitops-getting-started from Gitea Path: environments/dev Cluster URL: https://kubernetes.default.svc Namespace: workshop-prod Click Create Click on Sync and then Synchronize to manually trigger the first sync    Watch the resources (Deployment, Service, Route) get rolled out to the project workshop-prod. Notice, we also scaling our app to 2 pods in the production stage as we want some high availability. But the actual deployment will not succeed as shown by the \u0026lsquo;broken heart\u0026rsquo; icons!\nSince we have not published our image to the Quay workshop-prod repository the initial Deployment will try to roll out non existant image from Quay. Once the first pipeline run is complete, our newly built image will be replaced in the Deployment and rolled out.\n Our complete production stage is now configured and controlled through GitOps. But how do we tell ArgoCD that there is a new version of our app to deploy? Well, we will add a step to our build pipeline updating the configuration repository.\nAs we do not want to modify our original repository file we will use a tool called Kustomize that can add incremental change layers to YAML files. Since ArgoCD permanently watches this repository, it will pick up these Kustomize changes.\nIt is also possible to update the repository with a Pull request. Then you have an approval process for your production deployment.\n Initialize the workshop-prod/workshop Repository in Quay We will need to initialize the workshop-prod/workshop in Quay so the robo user will be able to push images there later on.\n In Quay select the organization openshift_workshop-prod on the right Click on + Create New Repository on the top left   Click image to enlarge    Make sure to select openshift_workshop-prod as Organization Enter workshop as repo name Set the repo to Public Click Create Public Repository   Click image to enlarge     Add Kustomize and Git Push Tekton Task Let\u0026rsquo;s add a new custom Tekton task to the workshop-int project that can update the Image tag via Kustomize after the build process completed and then push the change to our git configuration repository.\nWe could add this through the OpenShift Web Console as well but to save time we will apply the file directly via the oc command.\n Go to your Web Terminal or open a new one. Apply the task via YAML:  oc create -f https://raw.githubusercontent.com/devsecops-workshop/yaml/main/tekton-kustomize.yml  In the OpenShift Web Console switch back to project workshop-int and then go to Pipelines \u0026gt; Tasks \u0026gt; Tasks and have a look at the just imported task git-update-deployment. You should see the git commands how the configuration repository will be cloned, patched by Kustomize and then pushed again.  Add Tekton Tasks to your Pipeline to Promote your Image to workshop-prod So now we have a new Tekton Task in our task catalog to update a GitOps Git repository, but we still need to promote the actual image from our workshop-int to workshop-prod project. Otherwise the image will not be available for our deployment.\n In the workshop_int project, go to Pipelines \u0026gt; Pipelines \u0026gt; workshop and then YAML  You can edit pipelines either directly in YAML or in the visual Pipeline Builder. We will see how to use the Builder later on, so let\u0026rsquo;s edit the YAML for now.\n Add the new Task to your Pipeline by adding it to the YAML like this:\n First we will add a new Pipeline Parameter \u0026lsquo;GIT_CONFIG_REPO\u0026rsquo; at the beginning of the pipeline and set it by default to our GitOps configuration repository (This will be updated by the Pipeline and then trigger ArgoCD to deploy to Production) So in the YAML view at the end of the spec \u0026gt; params section add the following (if the \u0026lt;DOMAIN\u0026gt; placeholder hasn\u0026rsquo;t been replaced automatically, do it manually):  - default: \u0026gt;- https://repository-git.apps.\u0026lt;DOMAIN\u0026gt;/gitea/openshift-gitops-getting-started.git name: GIT_CONFIG_REPO type: string  Next insert the new tasks at the tasks level right after the deploy task We will map the Pipeline parameter GIT_CONFIG_REPO to the Task parameter GIT_REPOSITORY Make sure to fix indentation after pasting into the YAML!  In the OpenShift YAML viewer/editor you can mark multiple lines and use tab to indent this lines for one step.\n - name: skopeo-copy params: - name: srcImageURL value: \u0026#34;docker://$(params.QUAY_URL)/openshift_workshop-int/workshop:latest\u0026#34; - name: destImageURL value: \u0026#34;docker://$(params.QUAY_URL)/openshift_workshop-prod/workshop:latest\u0026#34; - name: srcTLSverify value: \u0026#34;false\u0026#34; - name: destTLSverify value: \u0026#34;false\u0026#34; runAfter: - build taskRef: kind: ClusterTask name: skopeo-copy workspaces: - name: images-url workspace: workspace - name: git-update-deployment params: - name: GIT_REPOSITORY value: $(params.GIT_CONFIG_REPO) - name: CURRENT_IMAGE value: \u0026#34;quay.io/nexus6/hello-microshift:1.0.0-SNAPSHOT\u0026#34; - name: NEW_IMAGE value: $(params.QUAY_URL)/openshift_workshop-prod/workshop - name: NEW_DIGEST value: $(tasks.build.results.IMAGE_DIGEST) - name: KUSTOMIZATION_PATH value: environments/dev runAfter: - skopeo-copy taskRef: kind: Task name: git-update-deployment workspaces: - name: workspace workspace: workspace The Pipeline should now look like this. Notice that the new tasks runs in parallel to the deploy task\n  Click image to enlarge   Now, the pipeline is set. The last thing we need is authentication against the Gitea repository and the workshop-prod Quay org. We will add those from the start pipeline form next. Make sure to replace the  placeholder if required.\nUpdate our Prod Stage via Pipeline and GitOps   Click on Pipeline Start\n In the form go down and expand Show credential options Click Add Secret, then enter  Secret name : quay-workshop-prod-token Access to: Image Registry Authentication type: Basic Authentication Server URL: quay-quay-quay.apps.\u0026lt;DOMAIN\u0026gt;/openshift_workshop-prod Username: openshift_workshop-prod+builder Password : (Retrieve this from the Quay organization openshift_workshop-prod robo account openshift_workshop-prod+builder as before) Click the checkmark   Then click Add Secret again  Secret name : gitea-secret Access to: Git Server Authentication type: Basic Authentication Server URL: https://repository-git.apps.\u0026lt;DOMAIN\u0026gt;/gitea/openshift-gitops-getting-started.git (replace url if necassary) Username: gitea Password : gitea Click the checkmark      Run the pipeline by clicking Start and see that in your Gitea configuration repository the file /environment/dev/kustomize.yaml is updated with the new image version Notice that the deploy and the git-update steps now run in parallel. This is one of the strength of Tekton. It can scale natively with pods on OpenShift.\n   This will tell ArgoCD to update the Deployment with this new image version\n  Check that the new image is rolled out sucessfully now (you may need to sync manually in ArgoCD to speed things up)\n  Architecture recap   Click image to enlarge   "
 },
 {
 	"uri": "https://devsecops-workshop.github.io/10-rhacs-setup/",
 	"title": "Install and Configure ACS",
 	"tags": [],
 	"description": "",
-	"content": "During the workshop you went through the OpenShift developer experience starting from software development using Quarkus and odo, moving on to automating build and deployment using Tekton pipelines and finally using GitOps for production deployments.\nNow it\u0026rsquo;s time to add another extremely important piece to the setup: enhancing application security in a containerized world. Using Red Hat Advanced Cluster Security for Kubernetes, of course!\nInstall RHACS RHCAS Operator Install the Advanced Cluster Security for Kubernetes operator from the OperatorHub:\n Switch Update approval to Manual Apart from this use the default settings Approve the installation when asked  Red Hat recommends installing the Red Hat Advanced Cluster Security for Kubernetes Operator in the rhacs-operator namespace. This will happen by default..\n Installing the main component Central You must install the ACS Central instance in its own project and not in the rhacs-operator and openshift-operator projects, or in any project in which you have installed the ACS Operator!\n  Navigate to Operators → Installed Operators Select the ACS operator You should now be in the rhacs-operator project the Operator created, create a new OpenShift Project for the Central instance:  Create a new project called stackrox (Red Hat recommends using stackrox as the project name.) by selecting Projects: Create project   In the Operator view under Provided APIs on the tile Central click Create Instance Switch to the YAML View. Replace the YAML content with the following:  apiVersion: platform.stackrox.io/v1alpha1 kind: Central metadata: name: stackrox-central-services namespace: stackrox spec: monitoring: openshift: enabled: true central: notifierSecretsEncryption: enabled: false exposure: loadBalancer: enabled: false port: 443 nodePort: enabled: false route: enabled: true telemetry: enabled: true db: isEnabled: Default persistence: persistentVolumeClaim: claimName: central-db resources: limits: cpu: 2 memory: 6Gi requests: cpu: 500m memory: 1Gi persistence: persistentVolumeClaim: claimName: stackrox-db egress: connectivityPolicy: Online scannerV4: db: persistence: persistentVolumeClaim: claimName: scanner-v4-db indexer: scaling: autoScaling: Disabled maxReplicas: 2 minReplicas: 1 replicas: 1 matcher: scaling: autoScaling: Disabled maxReplicas: 2 minReplicas: 1 replicas: 1 scannerComponent: Default scanner: analyzer: scaling: autoScaling: Disabled maxReplicas: 2 minReplicas: 1 replicas: 1  Click Create  After the deployment has finished (Status Conditions: Deployed, Initialized in the Operator view on the Central tab), it can take some time until the application is completely up and running. One easy way to check the state, is to switch to the Developer console view on the upper left. Then make sure you are in the stackrox project and open the Topology map. You\u0026rsquo;ll see the three deployments of the Central instance:\n scanner scanner-db central central-db  Wait until all Pods have been scaled up properly.\nVerify the Installation\nSwitch to the Administrator console view again. Now to check the installation of your Central instance, access the ACS Portal:\n Look up the central-htpasswd secret that was created to get the password  If you access the details of your Central instance in the Operator page you\u0026rsquo;ll find the complete commandline using oc to retrieve the password from the secret under Admin Credentials Info. Just sayin\u0026hellip; ;)\n  Look up and access the route central which was also generated automatically.  This will get you to the ACS Portal, accept the self-signed certificate and login as user admin with the password from the secret.\nNow you have a Central instance that provides the following services in an RHACS setup:\n  The application management interface and services. It handles data persistence, API interactions, and user interface access. You can use the same Central instance to secure multiple OpenShift or Kubernetes clusters.\n  Scanner, which is a vulnerability scanner for scanning container images. It analyzes all image layers for known vulnerabilities from the Common Vulnerabilities and Exposures (CVEs) list. Scanner also identifies vulnerabilities in packages installed by package managers and in dependencies for multiple programming languages.\n  To actually do and see anything you need to add a SecuredCluster (be it the same or another OpenShift cluster). For effect go to the ACS Portal, the Dashboard should by pretty empty, click on either of the Compliance link in the menu to the left, lots of zero\u0026rsquo;s and empty panels, too.\nThis is because you don\u0026rsquo;t have a monitored and secured OpenShift cluster yet.\nPrepare to add Secured Clusters Now we\u0026rsquo;ll add your OpenShift cluster as Secured Cluster to ACS.\nFirst, you have to generate an init bundle which contains certificates and is used to authenticate a SecuredCluster to the Central instance, regardless if it\u0026rsquo;s the same cluster as the Central instance or a remote/other cluster.\nWe are using the API to create the init bundle in this workshop, because if we use the Web Terminal we can\u0026rsquo;t upload and downloaded file to it. For the steps to create the init bundle in the ACS Portal see the appendix.\nLet\u0026rsquo;s create the init bundle using the ACS API on the commandline:\nGo to your Web Terminal (if it timed out just start it again), then paste, edit and execute the following lines:\n Set the ACS API endpoint, replace \u0026lt;central_url\u0026gt; with the base URL of your ACS portal (without \u0026lsquo;https://\u0026rsquo; e.g. central-stackrox.apps.cluster-cqtsh.cqtsh.example.com)  export ROX_ENDPOINT=\u0026lt;central_url\u0026gt;:443  Set the admin password (same as for the portal, look up the secrets again)  export PASSWORD=\u0026lt;password\u0026gt;  Give the init bundle a name  export DATA={\\\u0026#34;name\\\u0026#34;:\\\u0026#34;my-init-bundle\\\u0026#34;}  Finally run the curl command against the API to create the init bundle using the variables set above  curl -k -o bundle.json -X POST -u \u0026#34;admin:$PASSWORD\u0026#34; -H \u0026#34;Content-Type: application/json\u0026#34; --data $DATA https://${ROX_ENDPOINT}/v1/cluster-init/init-bundles  Convert it to the needed format  cat bundle.json | jq -r \u0026#39;.kubectlBundle\u0026#39; \u0026gt; bundle64 base64 -d bundle64 \u0026gt; kube-secrets.bundle You should now have these two files in your Web Terminal session: bundle.json and kube-secrets.bundle.\nThe init bundle needs to be applied to all OpenShift clusters you want to secure and monitor.\nAs said, you can create an init bundle in the ACS Portal, download it and apply it from any terminal where you can run oc against your cluster. We did it the API way to show you how to do it and to enable you to use the Web Terminal.\n Prepare the Secured Cluster For this workshop we run Central and SecuredCluster on one OpenShift cluster. E.g. we monitor and secure the same cluster the central services live on.\nApply the init bundle\nAgain in the web terminal:\n Run oc create -f kube-secrets.bundle -n stackrox pointing to the init bundle you downloaded from the Central instance or created via the API as above. This will create a number of secrets, the output should be:  secret/collector-tls created secret/sensor-tls created secret/admission-control-tls created Add the Cluster as SecuredCluster to ACS Central You are ready to install the SecuredClusters instance, this will deploy the secured cluster services:\n In the OpenShift Web Console go to the ACS Operator in Operators-\u0026gt;Installed Operators Using the Operator create an instance of the Secured Cluster type in the Project you created (should be stackrox) If you are in the YAML view switch to the Form view Change the Cluster Name for the cluster if you want, it\u0026rsquo;ll appear under this name in the ACS Portal And most importantly for Central Endpoint enter the address and port number of your Central instance, this is the same as the ACS Portal.  If your ACS Portal is available at https://central-stackrox.apps.\u0026lt;DOMAIN\u0026gt; the endpoint is central-stackrox.apps.\u0026lt;DOMAIN\u0026gt;:443.   Under Admission Control Settings make sure  listenOnCreates, listenOnUpdates and ListenOnEvents is enabled Set Contact Image Scanners to ScanIfMissing  **Collector Settings** change the value for **Collection** form `EBPF` to `KernelModule`. This is a workaround for a known issue. --  Click Create  Now go to your ACS Portal again, after a couple of minutes you should see your secured cluster under Platform Configuration-\u0026gt;Clusters. Wait until all Cluster Status indicators become green.\nConfigure Quay Integrations in ACS Create an integration to scan the Quay registry To enable scanning of images in your Quay registry, you\u0026rsquo;ll have to configure an Integration with valid credentials, so this is what you\u0026rsquo;ll do.\nNow create a new Integration:\n Access the RHACS Portal and configure the already existing integrations of type Generic Docker Registry. Go to Platform Configuration -\u0026gt; Integrations -\u0026gt; Generic Docker Registry. Click the New integration button Integration name: Quay local Endpoint: https://quay-quay-quay.apps.\u0026lt;DOMAIN\u0026gt; (replace domain if required) Username: quayadmin Password: quayadmin Press the Test button to validate the connection and press Save when the test is successful.  Architecture recap   Click image to enlarge   "
+	"content": "During the workshop you went through the OpenShift developer experience starting from software development using Quarkus and odo, moving on to automating build and deployment using Tekton pipelines and finally using GitOps for production deployments.\nNow it\u0026rsquo;s time to add another extremely important piece to the setup: enhancing application security in a containerized world. Using Red Hat Advanced Cluster Security for Kubernetes, of course!\nInstall RHACS RHCAS Operator Install the Advanced Cluster Security for Kubernetes operator from the OperatorHub:\n Switch Update approval to Manual Apart from this use the default settings Approve the installation when asked  Red Hat recommends installing the Red Hat Advanced Cluster Security for Kubernetes Operator in the rhacs-operator namespace. This will happen by default..\n Installing the main component Central You must install the ACS Central instance in its own project and not in the rhacs-operator and openshift-operator projects, or in any project in which you have installed the ACS Operator!\n  Navigate to Operators → Installed Operators Select the ACS operator You should now be in the rhacs-operator project the Operator created, create a new OpenShift Project for the Central instance:  Create a new project called stackrox (Red Hat recommends using stackrox as the project name.) by selecting Projects: Create project   In the Operator view under Provided APIs on the tile Central click Create Instance Switch to the YAML View. Replace the YAML content with the following:  apiVersion: platform.stackrox.io/v1alpha1 kind: Central metadata: name: stackrox-central-services namespace: stackrox spec: monitoring: openshift: enabled: true central: notifierSecretsEncryption: enabled: false exposure: loadBalancer: enabled: false port: 443 nodePort: enabled: false route: enabled: true telemetry: enabled: true db: isEnabled: Default persistence: persistentVolumeClaim: claimName: central-db resources: limits: cpu: 2 memory: 6Gi requests: cpu: 500m memory: 1Gi persistence: persistentVolumeClaim: claimName: stackrox-db egress: connectivityPolicy: Online scannerV4: db: persistence: persistentVolumeClaim: claimName: scanner-v4-db indexer: scaling: autoScaling: Disabled maxReplicas: 2 minReplicas: 1 replicas: 1 matcher: scaling: autoScaling: Disabled maxReplicas: 2 minReplicas: 1 replicas: 1 scannerComponent: Default scanner: analyzer: scaling: autoScaling: Disabled maxReplicas: 2 minReplicas: 1 replicas: 1  Click Create  After the deployment has finished (Status Conditions: Deployed, Initialized in the Operator view on the Central tab), it can take some time until the application is completely up and running. One easy way to check the state, is to switch to the Developer console view on the upper left. Then make sure you are in the stackrox project and open the Topology map. You\u0026rsquo;ll see the three deployments of the Central instance:\n scanner scanner-db central central-db  Wait until all Pods have been scaled up properly.\nVerify the Installation\nSwitch to the Administrator console view again. Now to check the installation of your Central instance, access the ACS Portal:\n Look up the central-htpasswd secret that was created to get the password  If you access the details of your Central instance in the Operator page you\u0026rsquo;ll find the complete commandline using oc to retrieve the password from the secret under Admin Credentials Info. Just sayin\u0026hellip; ;)\n  Look up and access the route central which was also generated automatically.  This will get you to the ACS Portal, accept the self-signed certificate and login as user admin with the password from the secret.\nNow you have a Central instance that provides the following services in an RHACS setup:\n  The application management interface and services. It handles data persistence, API interactions, and user interface access. You can use the same Central instance to secure multiple OpenShift or Kubernetes clusters.\n  Scanner, which is a vulnerability scanner for scanning container images. It analyzes all image layers for known vulnerabilities from the Common Vulnerabilities and Exposures (CVEs) list. Scanner also identifies vulnerabilities in packages installed by package managers and in dependencies for multiple programming languages.\n  To actually do and see anything you need to add a SecuredCluster (be it the same or another OpenShift cluster). For effect go to the ACS Portal, the Dashboard should by pretty empty, click on either of the Compliance link in the menu to the left, lots of zero\u0026rsquo;s and empty panels, too.\nThis is because you don\u0026rsquo;t have a monitored and secured OpenShift cluster yet.\nPrepare to add Secured Clusters Now we\u0026rsquo;ll add your OpenShift cluster as Secured Cluster to ACS.\nFirst, you have to generate an init bundle which contains certificates and is used to authenticate a SecuredCluster to the Central instance, regardless if it\u0026rsquo;s the same cluster as the Central instance or a remote/other cluster.\nWe are using the API to create the init bundle in this workshop, because if we use the Web Terminal we can\u0026rsquo;t upload and downloaded file to it. For the steps to create the init bundle in the ACS Portal see the appendix.\nLet\u0026rsquo;s create the init bundle using the ACS API on the commandline:\nGo to your Web Terminal (if it timed out just start it again), then paste, edit and execute the following lines:\n Set the ACS API endpoint, replace \u0026lt;central_url\u0026gt; with the base URL of your ACS portal (without \u0026lsquo;https://\u0026rsquo; e.g. central-stackrox.apps.cluster-cqtsh.cqtsh.example.com)  export ROX_ENDPOINT=\u0026lt;central_url\u0026gt;:443  Set the admin password (same as for the portal, look up the secrets again)  export PASSWORD=\u0026lt;password\u0026gt;  Give the init bundle a name  export DATA={\\\u0026#34;name\\\u0026#34;:\\\u0026#34;my-init-bundle\\\u0026#34;}  Finally run the curl command against the API to create the init bundle using the variables set above  curl -k -o bundle.json -X POST -u \u0026#34;admin:$PASSWORD\u0026#34; -H \u0026#34;Content-Type: application/json\u0026#34; --data $DATA https://${ROX_ENDPOINT}/v1/cluster-init/init-bundles  Convert it to the needed format  cat bundle.json | jq -r \u0026#39;.kubectlBundle\u0026#39; \u0026gt; bundle64 base64 -d bundle64 \u0026gt; kube-secrets.bundle You should now have these two files in your Web Terminal session: bundle.json and kube-secrets.bundle.\nThe init bundle needs to be applied to all OpenShift clusters you want to secure and monitor.\nAs said, you can create an init bundle in the ACS Portal, download it and apply it from any terminal where you can run oc against your cluster. We used the API method to show you how to use it and to enable you to use the Web Terminal.\n Prepare the Secured Cluster For this workshop we run Central and SecuredCluster on one OpenShift cluster. E.g. we monitor and secure the same cluster the central services live on.\nApply the init bundle\nAgain in the web terminal:\n Run oc create -f kube-secrets.bundle -n stackrox pointing to the init bundle you downloaded from the Central instance or created via the API as above. This will create a number of secrets, the output should be:  secret/collector-tls created secret/sensor-tls created secret/admission-control-tls created Add the Cluster as SecuredCluster to ACS Central You are ready to install the SecuredClusters instance, this will deploy the secured cluster services:\n In the OpenShift Web Console go to the ACS Operator in Operators-\u0026gt;Installed Operators Using the Operator create an instance of the Secured Cluster type in the Project you created (should be stackrox) If you are in the YAML view switch to the Form view Change the Cluster Name for the cluster if you want, it\u0026rsquo;ll appear under this name in the ACS Portal And most importantly for Central Endpoint enter the address and port number of your Central instance, this is the same as the ACS Portal.  If your ACS Portal is available at https://central-stackrox.apps.\u0026lt;DOMAIN\u0026gt; the endpoint is central-stackrox.apps.\u0026lt;DOMAIN\u0026gt;:443.   Under Admission Control Settings make sure  listenOnCreates, listenOnUpdates and ListenOnEvents is enabled Set Contact Image Scanners to ScanIfMissing  **Collector Settings** change the value for **Collection** form `EBPF` to `KernelModule`. This is a workaround for a known issue. --  Click Create  Now go to your ACS Portal again, after a couple of minutes you should see your secured cluster under Platform Configuration-\u0026gt;Clusters. Wait until all Cluster Status indicators become green.\nConfigure Quay Integrations in ACS Create an integration to scan the Quay registry To enable scanning of images in your Quay registry, you\u0026rsquo;ll have to configure an Integration with valid credentials, so this is what you\u0026rsquo;ll do.\nNow, create a new Integration:\n Access the RHACS Portal and configure the already existing integrations of type Generic Docker Registry. Go to Platform Configuration -\u0026gt; Integrations -\u0026gt; Generic Docker Registry. Click the New integration button Integration name: Quay local Endpoint: https://quay-quay-quay.apps.\u0026lt;DOMAIN\u0026gt; (replace domain if required) Username: quayadmin Password: quayadmin Press the Test button to validate the connection and press Save when the test is successful.  Architecture recap   Click image to enlarge   "
 },
 {
 	"uri": "https://devsecops-workshop.github.io/11-rhacs-warmup/",
@@ -60,14 +60,14 @@
 	"title": "Create a Custom Security Policy",
 	"tags": [],
 	"description": "",
-	"content": "Objective You should have one or more pipelines to build your application from the first workshop part, now we want to secure the build and deployment of it. For the sake of this workshop we\u0026rsquo;ll take a somewhat simplified use case:\nWe want to scan our application image for the Red Hat Security Advisory RHSA-2021:4904 concerning openssl-lib.\nIf this RHSA is found in an image we don\u0026rsquo;t want to deploy the application.\nThese are the steps you will go through:\n Create a custom Security Policy to check for the advisory Test if the policy is triggered in non-enforcing mode  with an older image version that contains the issue and then with a newer version with the issue fixed   The final goal is to integrate the policy into the build pipeline  Create a Custom System Policy First create a new policy category and the system policy. In the ACS Portal do the following:\n Platform Configuration-\u0026gt;Policy Management-\u0026gt;Policy categories tab-\u0026gt;Create category  Enter Workshop as Category name Click Create   Platform Configuration-\u0026gt;Policy Management-\u0026gt;Policies tab-\u0026gt;Create policy Policy Details  Name: Workshop RHSA-2021:4904 Severity: Critical Categories: Workshop Click Next   Policy Behaviour  Lifecycle Stages: Build, Deploy Response method: Inform Click Next   Policy Criteria  Find the CVE policy criteria under Drag out policy fields in Image contents Drag \u0026amp; drop it on the drop zone of Policy Section 1 Put RHSA-2021:4904 into the CVE identifier field Click Next   Policy Scope  You could limit the scope the policy is applied in, do nothing for now   Review Policy  Have a quick look around, if the policy would create a violation you get a preview here Click Save      Click image to enlarge   Currently there is an issue with persisting the group change to the central instance. As a workaround run this in your Web Terminal zu restart the central instance:\noc delete pod -n stackrox -l app=central Test the Policy Start the pipeline with the affected image version:\n In the OpenShift Web Console go to the Pipeline in your workshop-int project, start it and set Version to java-old-image (Remember how we set up this ImageStream tag to point to an old and vulnerable version of the image?) In the ACS Portal follow the Violations view  To make it easier spotting the violations for this deployment you can filter the list by entering namespace and then workshop-int in the filter bar.\n  Expected result:  You\u0026rsquo;ll see the build deployments (Quarkus-Build-Options-Git-Gsklhg-Build-...) come and go when they are finished. When the final build is deployed you\u0026rsquo;ll see a violation in ACS Portal for policy Workshop RHSA-2021:4904 (Check the Time of the violation)    There will be other policy violations listed, triggered by default policies, have a look around. Note that none of the policies is enforced (so that the pipeline build would be stopped) yet!\n Now start the pipeline with the fixed image version that doesn\u0026rsquo;t contain the CVE anymore:\n Start the pipeline again but this time leave the Java Version as is (openjdk-11-el7). Follow the Violations in the ACS Portal Expected result:  You\u0026rsquo;ll see the build deployments come up and go When the final build is deployed you\u0026rsquo;ll see the policy violation for Workshop RHSA-2021:4904 for your deployment is gone because the image no longer contains it    This shows how ACS is automatically scanning images when they become active against all enabled policies. But we don\u0026rsquo;t want to just admire a violation after the image has been deployed, we want to disable the deployment during build time! So the next step is to integrate the check into the build pipeline and enforce it (don\u0026rsquo;t deploy the application).\nArchitecture recap   Click image to enlarge   "
+	"content": "Objective You should have one or more pipelines to build your application from the first workshop part, now we want to secure the build and deployment of it. For the sake of this workshop we\u0026rsquo;ll take a somewhat simplified use case:\nWe want to scan our application image for the Red Hat Security Advisory RHSA-2021:4904 concerning openssl-lib.\nIf this RHSA is found in an image we don\u0026rsquo;t want to deploy the application.\nThese are the steps you will go through:\n Create a custom Security Policy to check for the advisory Test if the policy is triggered in non-enforcing mode  with an older image version that contains the issue and then with a newer version with the issue fixed   The final goal is to integrate the policy into the build pipeline  Create a Custom System Policy First create a new policy category and the system policy. In the ACS Portal do the following:\n Platform Configuration-\u0026gt;Policy Management-\u0026gt;Policy categories tab-\u0026gt;Create category  Enter Workshop as Category name Click Create   Platform Configuration-\u0026gt;Policy Management-\u0026gt;Policies tab-\u0026gt;Create policy Policy Details  Name: Workshop RHSA-2021:4904 Severity: Critical Categories: Workshop Click Next   Policy Behaviour  Lifecycle Stages: Build, Deploy Response method: Inform Click Next   Policy Criteria  Find the CVE policy criteria under Drag out policy fields in Image contents Drag \u0026amp; drop it on the drop zone of Policy Section 1 Put RHSA-2021:4904 into the CVE identifier field Click Next   Policy Scope  You could limit the scope the policy is applied in, do nothing for now Click Next   Review Policy  Have a quick look around, if the policy would create a violation you get a preview here Click Save      Click image to enlarge   Currently there is an issue with persisting the group change to the central instance. As a workaround run this in your Web Terminal zu restart the central instance:\noc delete pod -n stackrox -l app=central Test the Policy Start the pipeline with the affected image version:\n In the OpenShift Web Console go to the Pipeline in your workshop-int project, start it and set Version to java-old-image (Remember how we set up this ImageStream tag to point to an old and vulnerable version of the image?) In the ACS Portal follow the Violations view  To make it easier spotting the violations for this deployment you can filter the list by entering namespace and then workshop-int in the filter bar.\n  Expected result:  You\u0026rsquo;ll see the build deployments (Quarkus-Build-Options-Git-Gsklhg-Build-...) come and go when they are finished. When the final build is deployed you\u0026rsquo;ll see a violation in ACS Portal for policy Workshop RHSA-2021:4904 (Check the Time of the violation)    There will be other policy violations listed, triggered by default policies, have a look around. Note that none of the policies are enforced (so that the pipeline build would be stopped) yet!\n Now start the pipeline with the fixed image version that doesn\u0026rsquo;t contain the CVE anymore:\n Start the pipeline again but this time leave the Java Version as is (openjdk-11-el7). Follow the Violations in the ACS Portal Expected result:  You\u0026rsquo;ll see the build deployments come up and go When the final build is deployed you\u0026rsquo;ll see the policy violation for Workshop RHSA-2021:4904 for your deployment is gone because the image no longer contains it    This shows how ACS is automatically scanning images when they become active against all enabled policies. But we don\u0026rsquo;t want to just admire a violation after the image has been deployed, we want to disable the deployment during build time! So the next step is to integrate the check into the build pipeline and enforce it (don\u0026rsquo;t deploy the application).\nArchitecture recap   Click image to enlarge   "
 },
 {
 	"uri": "https://devsecops-workshop.github.io/13-rhacs-pipeline/",
 	"title": "Integrating ACS into the Pipeline",
 	"tags": [],
 	"description": "",
-	"content": "Finally: Putting the Sec in DevSecOps! There are basically two ways to interface with ACS. The UI, which focuses on the needs of the security team, and a separate \u0026ldquo;interface\u0026rdquo; for developers to integrate into their existing toolset (CI/CD pipeline, consoles, ticketing systems etc): The roxctl commandline tool. This way ACS provides a familiar interface to understand and address issues that the security team considers important.\n ACS policies can act during the CI/CD pipeline to identify security risk in container images before they are started.\nIntegrate Image Scan into the Pipeline You should have created and build a custom policy in ACS and tested it to trigger violations. Now you will integrate it into the build pipeline.\nOur task will use the roxctl cli Build-time policies require the use of the roxctl command-line tool which is available for download from the ACS Central UI, in the upper right corner of the dashboard. You don\u0026rsquo;t need to to download this now as our Tekton task will do this automatically.\nroxctl needs to authenticate to ACS Central to do anything. You can use either username and password or API tokens to authenticate against ACS Central. It\u0026rsquo;s good practice to use a token so that\u0026rsquo;s what we\u0026rsquo;ll do.\nLet\u0026rsquo;s Go : Create the roxctl token In the ACS portal:\n Navigate to Platform Configuration \u0026gt; Integrations. Scroll down to the Authentication Tokens category, and select API Token. Click Generate Token. Enter the name pipeline for the token and select the role Admin. Select Generate Save the contents of the token somewhere!  Create OCP secret with token Change to the OpenShift Web Console and create a secret with the API token in the project your pipeline lives in:\n In the UI switch to your workshop-int Project Create a new key/value Secret named roxsecrets Introduce these key/values into the secret:  rox_central_endpoint: \u0026lt;the URL to your ACS Portal\u0026gt; (without https:// but adding the port, e.g. entral-stackrox.apps.cluster-cqtsh.cqtsh.example.com:443)  If the DOMAIN placeholder was automatically replaced it should be: central-stackrox.apps.\u0026lt;DOMAIN\u0026gt;:443 If not, replace it manually with your DOMAIN   rox_api_token: \u0026lt;the API token you generated\u0026gt;    Even if the form says Drag and drop file with your value here\u0026hellip; you can just paste the text.\n Remove ImageStream Change Trigger There is one more thing you have to do before integrating the image scanning into your build pipeline: When you created your deployment, a trigger was automatically added that will deploy a new version when the image referenced by the ImageStream changes.\nThis is not what we want! Because this way a newly build image would be deployed immediately even if the roxctl scan finds a policy violation and terminates the pipeline.\nHave a look for yourself:\n In the OCP console go to Workloads-\u0026gt;Deployments and open the workshop Deployment Switch to the YAML view Near the top under annotations (around lines 11-12) you\u0026rsquo;ll find an annotation image.openshift.io/triggers.  Remove exactly this lines and click Save:\nimage.openshift.io/triggers: \u0026gt;- [{\u0026#34;from\u0026#34;:{\u0026#34;kind\u0026#34;:\u0026#34;ImageStreamTag\u0026#34;,\u0026#34;name\u0026#34;:\u0026#34;workshop2:latest\u0026#34;,\u0026#34;namespace\u0026#34;:\u0026#34;workshop-int\u0026#34;},\u0026#34;fieldPath\u0026#34;:\u0026#34;spec.template.spec.containers[?(@.name==\\\u0026#34;workshop2\\\u0026#34;)].image\u0026#34;,\u0026#34;pause\u0026#34;:\u0026#34;false\u0026#34; This way we make sure that a new image won\u0026rsquo;t be deployed automatically right after the build task which also updates the ImageStream.\nCreate a Scan Task You are now ready to create a new pipeline task that will use roxctl to scan the image build in your pipeline before the deploy step:\n In the OpenShift UI, make sure you are still in the project with your pipeline and the secret roxsecrets Go to Pipelines-\u0026gt;Tasks Click Create-\u0026gt; ClusterTask Replace the YAML displayed with this:  apiVersion: tekton.dev/v1beta1 kind: ClusterTask metadata: name: rox-image-check spec: params: - description: \u0026gt;- Secret containing the address:port tuple for StackRox Central (example - rox.stackrox.io:443) name: rox_central_endpoint type: string - description: Secret containing the StackRox API token with CI permissions name: rox_api_token type: string - description: \u0026#34;Full name of image to scan (example -- gcr.io/rox/sample:5.0-rc1)\u0026#34; name: image type: string - description: Use image digest result from s2i-java build task name: image_digest type: string results: - description: Output of `roxctl image check` name: check_output steps: - env: - name: ROX_API_TOKEN valueFrom: secretKeyRef: key: rox_api_token name: $(params.rox_api_token) - name: ROX_CENTRAL_ENDPOINT valueFrom: secretKeyRef: key: rox_central_endpoint name: $(params.rox_central_endpoint) image: registry.access.redhat.com/ubi8/ubi-minimal:latest name: rox-image-check resources: {} script: \u0026gt; #!/usr/bin/env bash set +x curl -k -L -H \u0026#34;Authorization: Bearer $ROX_API_TOKEN\u0026#34; https://$ROX_CENTRAL_ENDPOINT/api/cli/download/roxctl-linux --output ./roxctl \u0026gt; /dev/null; echo \u0026#34;Getting roxctl\u0026#34; chmod +x ./roxctl \u0026gt; /dev/null ./roxctl image check -c Workshop --insecure-skip-tls-verify -e $ROX_CENTRAL_ENDPOINT --image $(params.image)@$(params.image_digest) Take your time to understand the Tekton task definition:\n First, some parameters are defined, it\u0026rsquo;s important to understand some of these are taken or depend on the build task that run before. The script action pulls the roxctl binary into the pipeline workspace so you\u0026rsquo;ll always have a version compatible with your ACS version. The most important bit is the roxctl execution, of course:  it executes the image check command only checks against policies from category Workshop that was created above. This way you can check against a subset of policies! defines the image to check and it\u0026rsquo;s digest    Add the Scan Task to the Pipeline Now add the rox-image-check task to your pipeline between the build and deploy steps.\n In the Pipelines view of your project click the three dots to the right and the Edit Pipeline  Remember how we edited the pipeline directly in yaml before? OpenShift comes with a graphical Pipeline editor that we will use this time.\n  Hover your mouse over build task and click the + at the right side side of it, to add a task Click on Add task Then enter rox-image-check in the search box   Click image to enlarge    Click the Add button to add to the pipeline To add the required parameters from the pipeline for the task so the ACS client can connect to central, click the rox-image-check task.   Click image to enlarge    A form with the parameters will open, fill it in:  rox_central_endpoint: roxsecrets rox_api_token: roxsecrets image: quay-quay-quay.apps.\u0026lt;DOMAIN\u0026gt;/openshift_workshop-int/workshop (if the DOMAIN placeholder hasn\u0026rsquo;t been replaced automatically, do it manually) Adapt the Project name if you changed it   image_digest: $(tasks.build.results.IMAGE_DIGEST)  This variable takes the result of the build task and uses it in the scan task.   Click image to enlarge      Don\u0026rsquo;t save yet  Add the oc patch Task to the Pipeline As you remember we removed the trigger that updates the Deployment on ImageStream chnages. Now the Deployment will never be updated and our new Image version will never be deployed to workshop-int.\nTo fix this we will add a new oc client Task that updates the Deployment, only after the Scan Task has run.\n While still in the visual pipeline editor Click on the + button to the left of the deploy Task Click on Add Task In the search window enter openshiftand select the openshift-client from Red Hat Click on Add Click on the new openshift-client Task In Task form on the right enter  Display name : update-deploy SCRIPT : oc patch deploy/workshop -p '{\u0026quot;spec\u0026quot;:{\u0026quot;template\u0026quot;:{\u0026quot;spec\u0026quot;:{\u0026quot;containers\u0026quot;:[{\u0026quot;name\u0026quot;:\u0026quot;workshop\u0026quot;,\u0026quot;image\u0026quot;:\u0026quot;$(params.QUAY_URL)/openshift_workshop-int/workshop@$(tasks.build.results.IMAGE_DIGEST)\u0026quot;}]}}}}'      Click image to enlarge    Now save the pipeline  Test the Scan Task With our custom System Policy still not set to enforce we first are going to test the pipeline integration. Go to Pipelines and next to your pipeline click on the three dots and then Start. Now in the pipeline startform enter java-old-image in the Version field.\n Expected Result:  The rox-image-check task should succeed, but if you have a look at the output (click the task in the visual representation) you should see that the build violated our policy!    Enforce the Policy The last step is to enforce the System Policy. If the policy is violated the pipeline should be stopped and the application should not be deployed.\n Edit your custom System Policy Workshop RHSA-2021:4904 in ACS Portal and set Response Method to Inform and enforce and then switch on Build and Deploy below. Run the pipeline again, first with Version java-old-image and then with Version openjdk-11-el7 (default) Expected results:  We are sure you know by now what to expect! The pipeline should fail with the old image version and succeed with the latest image version! Make sure you run the pipeline once, otherwise your application will not have a valid image tag when you kill the running pod in the next chapter      Click image to enlarge   Architecture recap   Click image to enlarge   "
+	"content": "Finally: Putting the Sec in DevSecOps! There are basically two ways to interface with ACS. The UI, which focuses on the needs of the security team, and a separate \u0026ldquo;interface\u0026rdquo; for developers to integrate into their existing toolset (CI/CD pipeline, consoles, ticketing systems etc): The roxctl commandline tool. This way ACS provides a familiar interface to understand and address issues that the security team considers important.\n ACS policies can act during the CI/CD pipeline to identify security risk in container images before they are started.\nIntegrate Image Scan into the Pipeline You should have created and build a custom policy in ACS and tested it to trigger violations. Now you will integrate it into the build pipeline.\nOur task will use the roxctl cli Build-time policies require the use of the roxctl command-line tool which is available for download from the ACS Central UI, in the upper right corner of the dashboard. You don\u0026rsquo;t need to to download this now as our Tekton task will do this automatically.\nroxctl needs to authenticate to ACS Central to do anything. You can use either username and password or API tokens to authenticate against ACS Central. It\u0026rsquo;s good practice to use a token so that\u0026rsquo;s what we\u0026rsquo;ll do.\nLet\u0026rsquo;s Go : Create the roxctl token In the ACS portal:\n Navigate to Platform Configuration \u0026gt; Integrations. Scroll down to the Authentication Tokens category, and select API Token. Click Generate Token. Enter the name pipeline for the token and select the role Admin. Select Generate Save the contents of the token somewhere!  Create OCP secret with token Change to the OpenShift Web Console and create a secret with the API token in the project your pipeline lives in:\n In the UI switch to your workshop-int Project Create a new key/value Secret named roxsecrets Introduce these key/values into the secret:  rox_central_endpoint: \u0026lt;the URL to your ACS Portal\u0026gt; (without https:// but adding the port, e.g. entral-stackrox.apps.cluster-cqtsh.cqtsh.example.com:443)  If the DOMAIN placeholder was automatically replaced it should be: central-stackrox.apps.\u0026lt;DOMAIN\u0026gt;:443 If not, replace it manually with your DOMAIN   rox_api_token: \u0026lt;the API token you generated\u0026gt;    Even if the form says Drag and drop file with your value here\u0026hellip; you can just paste the text.\n Remove ImageStream Change Trigger There is one more thing you have to do before integrating the image scanning into your build pipeline:\nWhen you created your deployment, a trigger was automatically added that deploys a new version when the image referenced by the ImageStream changes.\nThis is not what we want! Because this way a newly build image would be deployed immediately even if the roxctl scan detects a policy violation and terminates the pipeline.\nHave a look for yourself:\n In the OCP console go to Workloads-\u0026gt;Deployments and open the workshop Deployment Switch to the YAML view Near the top under annotations (around lines 11-12) you\u0026rsquo;ll find an annotation image.openshift.io/triggers.  Remove exactly this lines and click Save:\nimage.openshift.io/triggers: \u0026gt;- [{\u0026#34;from\u0026#34;:{\u0026#34;kind\u0026#34;:\u0026#34;ImageStreamTag\u0026#34;,\u0026#34;name\u0026#34;:\u0026#34;workshop2:latest\u0026#34;,\u0026#34;namespace\u0026#34;:\u0026#34;workshop-int\u0026#34;},\u0026#34;fieldPath\u0026#34;:\u0026#34;spec.template.spec.containers[?(@.name==\\\u0026#34;workshop2\\\u0026#34;)].image\u0026#34;,\u0026#34;pause\u0026#34;:\u0026#34;false\u0026#34; This way we make sure that a new image won\u0026rsquo;t be deployed automatically right after the build task which also updates the ImageStream.\nCreate a Scan Task You are now ready to create a new pipeline task that will use roxctl to scan the image build in your pipeline before the deploy step:\n In the OpenShift UI, make sure you are still in the project with your pipeline and the secret roxsecrets Go to Pipelines-\u0026gt;Tasks Click Create-\u0026gt; ClusterTask Replace the YAML displayed with this:  apiVersion: tekton.dev/v1beta1 kind: ClusterTask metadata: name: rox-image-check spec: params: - description: \u0026gt;- Secret containing the address:port tuple for StackRox Central (example - rox.stackrox.io:443) name: rox_central_endpoint type: string - description: Secret containing the StackRox API token with CI permissions name: rox_api_token type: string - description: \u0026#34;Full name of image to scan (example -- gcr.io/rox/sample:5.0-rc1)\u0026#34; name: image type: string - description: Use image digest result from s2i-java build task name: image_digest type: string results: - description: Output of `roxctl image check` name: check_output steps: - env: - name: ROX_API_TOKEN valueFrom: secretKeyRef: key: rox_api_token name: $(params.rox_api_token) - name: ROX_CENTRAL_ENDPOINT valueFrom: secretKeyRef: key: rox_central_endpoint name: $(params.rox_central_endpoint) image: registry.access.redhat.com/ubi8/ubi-minimal:latest name: rox-image-check resources: {} script: \u0026gt; #!/usr/bin/env bash set +x curl -k -L -H \u0026#34;Authorization: Bearer $ROX_API_TOKEN\u0026#34; https://$ROX_CENTRAL_ENDPOINT/api/cli/download/roxctl-linux --output ./roxctl \u0026gt; /dev/null; echo \u0026#34;Getting roxctl\u0026#34; chmod +x ./roxctl \u0026gt; /dev/null ./roxctl image check -c Workshop --insecure-skip-tls-verify -e $ROX_CENTRAL_ENDPOINT --image $(params.image)@$(params.image_digest) Take your time to understand the Tekton task definition:\n First, some parameters are defined, it\u0026rsquo;s important to understand some of these are taken or depend on the build task that run before. The script action pulls the roxctl binary into the pipeline workspace so you\u0026rsquo;ll always have a version compatible with your ACS version. The most important bit is the roxctl execution, of course:  it executes the image check command only checks against policies from category Workshop that was created above. This way you can check against a subset of policies! defines the image to check and it\u0026rsquo;s digest    Add the Scan Task to the Pipeline Now add the rox-image-check task to your pipeline between the build and deploy steps.\n In the Pipelines view of your project click the three dots to the right and the Edit Pipeline  Remember how we edited the pipeline directly in yaml before? OpenShift comes with a graphical Pipeline editor that we will use this time.\n  Hover your mouse over build task and click the + at the right side of it, to add a task Click on Add task Then enter rox-image-check in the search box   Click image to enlarge    Click the Add button to add to the pipeline To add the required parameters from the pipeline for the task so the ACS client can connect to central, click the rox-image-check task.   Click image to enlarge    A form with the parameters will open, fill it in:  rox_central_endpoint: roxsecrets rox_api_token: roxsecrets image: quay-quay-quay.apps.\u0026lt;DOMAIN\u0026gt;/openshift_workshop-int/workshop (if the DOMAIN placeholder hasn\u0026rsquo;t been replaced automatically, do it manually) Adapt the Project name if you changed it   image_digest: $(tasks.build.results.IMAGE_DIGEST)  This variable takes the result of the build task and uses it in the scan task.   Click image to enlarge      Don\u0026rsquo;t save yet  Add the oc patch Task to the Pipeline As you remember we removed the trigger that updates the Deployment on ImageStream changes. Now the Deployment will never be updated and our new Image version will never be deployed to workshop-int.\nTo fix this we will add a new oc client Task that updates the Deployment, only after the Scan Task has run.\n While still in the visual pipeline editor Click on the + button to the left of the deploy Task Click on Add Task In the search window enter openshiftand select the openshift-client from Red Hat Click on Add Click on the new openshift-client Task In Task form on the right enter  Display name : update-deploy SCRIPT : oc patch deploy/workshop -p '{\u0026quot;spec\u0026quot;:{\u0026quot;template\u0026quot;:{\u0026quot;spec\u0026quot;:{\u0026quot;containers\u0026quot;:[{\u0026quot;name\u0026quot;:\u0026quot;workshop\u0026quot;,\u0026quot;image\u0026quot;:\u0026quot;$(params.QUAY_URL)/openshift_workshop-int/workshop@$(tasks.build.results.IMAGE_DIGEST)\u0026quot;}]}}}}'      Click image to enlarge    Now save the pipeline  Test the Scan Task With our custom System Policy still not set to enforce we first are going to test the pipeline integration. Go to Pipelines and next to your pipeline click on the three dots and then Start. Now in the pipeline startform enter java-old-image in the Version field.\n Expected Result:  The rox-image-check task should succeed, but if you have a look at the output (click the task in the visual representation) you should see that the build violated our policy!    Enforce the Policy The last step is to enforce the System Policy. If the policy is violated the pipeline should be stopped and the application should not be deployed.\n Edit your custom System Policy Workshop RHSA-2021:4904 in ACS Portal and set Response Method to Inform and enforce and then switch on Build and Deploy below. Run the pipeline again, first with Version java-old-image and then with Version openjdk-11-el7 (default) Expected results:  We are sure you know by now what to expect! The pipeline should fail with the old image version and succeed with the latest image version! Make sure you run the pipeline once, otherwise your application will not have a valid image tag when you kill the running pod in the next chapter      Click image to enlarge   Architecture recap   Click image to enlarge   "
 },
 {
 	"uri": "https://devsecops-workshop.github.io/15-runtime-security/",
diff --git a/tags/index.html b/tags/index.html
index c52ca0b..ab16ae3 100644
--- a/tags/index.html
+++ b/tags/index.html
@@ -12,22 +12,22 @@
     <title>Tags :: DevSecOps Workshop</title>
 
     
-    <link href="https://devsecops-workshop.github.io/css/nucleus.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/fontawesome-all.min.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/hybrid.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/featherlight.min.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/perfect-scrollbar.min.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/auto-complete.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/atom-one-dark-reasonable.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/theme.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/tabs.css?1714740090" rel="stylesheet">
-    <link href="https://devsecops-workshop.github.io/css/hugo-theme.css?1714740090" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/nucleus.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/fontawesome-all.min.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/hybrid.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/featherlight.min.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/perfect-scrollbar.min.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/auto-complete.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/atom-one-dark-reasonable.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/theme.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/tabs.css?1714740158" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/hugo-theme.css?1714740158" rel="stylesheet">
     
-    <link href="https://devsecops-workshop.github.io/css/theme-red.css?1714740090" rel="stylesheet">
+    <link href="https://devsecops-workshop.github.io/css/theme-red.css?1714740158" rel="stylesheet">
     
     
 
-    <script src="https://devsecops-workshop.github.io/js/jquery-3.3.1.min.js?1714740090"></script>
+    <script src="https://devsecops-workshop.github.io/js/jquery-3.3.1.min.js?1714740158"></script>
 
     <style>
       :root #header + #content > #left > #rlblock_left{
@@ -61,14 +61,14 @@
     <span data-search-clear=""><i class="fas fa-times"></i></span>
 </div>
 
-<script type="text/javascript" src="https://devsecops-workshop.github.io/js/lunr.min.js?1714740090"></script>
-<script type="text/javascript" src="https://devsecops-workshop.github.io/js/auto-complete.js?1714740090"></script>
+<script type="text/javascript" src="https://devsecops-workshop.github.io/js/lunr.min.js?1714740158"></script>
+<script type="text/javascript" src="https://devsecops-workshop.github.io/js/auto-complete.js?1714740158"></script>
 <script type="text/javascript">
     
         var baseurl = "https:\/\/devsecops-workshop.github.io\/";
     
 </script>
-<script type="text/javascript" src="https://devsecops-workshop.github.io/js/search.js?1714740090"></script>
+<script type="text/javascript" src="https://devsecops-workshop.github.io/js/search.js?1714740158"></script>
 
     
   </div>
@@ -753,19 +753,19 @@ <h1>
     <div style="left: -1000px; overflow: scroll; position: absolute; top: -1000px; border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;">
       <div style="border: none; box-sizing: content-box; height: 200px; margin: 0px; padding: 0px; width: 200px;"></div>
     </div>
-    <script src="https://devsecops-workshop.github.io/js/clipboard.min.js?1714740090"></script>
-    <script src="https://devsecops-workshop.github.io/js/perfect-scrollbar.min.js?1714740090"></script>
-    <script src="https://devsecops-workshop.github.io/js/perfect-scrollbar.jquery.min.js?1714740090"></script>
-    <script src="https://devsecops-workshop.github.io/js/jquery.sticky.js?1714740090"></script>
-    <script src="https://devsecops-workshop.github.io/js/featherlight.min.js?1714740090"></script>
-    <script src="https://devsecops-workshop.github.io/js/highlight.pack.js?1714740090"></script>
+    <script src="https://devsecops-workshop.github.io/js/clipboard.min.js?1714740158"></script>
+    <script src="https://devsecops-workshop.github.io/js/perfect-scrollbar.min.js?1714740158"></script>
+    <script src="https://devsecops-workshop.github.io/js/perfect-scrollbar.jquery.min.js?1714740158"></script>
+    <script src="https://devsecops-workshop.github.io/js/jquery.sticky.js?1714740158"></script>
+    <script src="https://devsecops-workshop.github.io/js/featherlight.min.js?1714740158"></script>
+    <script src="https://devsecops-workshop.github.io/js/highlight.pack.js?1714740158"></script>
     <script>hljs.initHighlightingOnLoad();</script>
-    <script src="https://devsecops-workshop.github.io/js/modernizr.custom-3.6.0.js?1714740090"></script>
-    <script src="https://devsecops-workshop.github.io/js/learn.js?1714740090"></script>
-    <script src="https://devsecops-workshop.github.io/js/hugo-learn.js?1714740090"></script>
+    <script src="https://devsecops-workshop.github.io/js/modernizr.custom-3.6.0.js?1714740158"></script>
+    <script src="https://devsecops-workshop.github.io/js/learn.js?1714740158"></script>
+    <script src="https://devsecops-workshop.github.io/js/hugo-learn.js?1714740158"></script>
     
         
-            <script src="https://devsecops-workshop.github.io/mermaid/mermaid.js?1714740090"></script>
+            <script src="https://devsecops-workshop.github.io/mermaid/mermaid.js?1714740158"></script>
         
         <script>
             mermaid.initialize({ startOnLoad: true });