Now we're in the main repository for this tutorial.
I'm going to scroll down here a little bit so we can see what's available.
First off,
we see some main setup instructions and a GitHub
Actions Setup Instructions section.
I'll come back to this in a few moments.
Obviously, we've got to give a special thanks.
Also,
within this course I'm going to be referencing some other
resources. Some of these you might see in various slides or I
might just talk about them verbally.
You can always reference any of the links needed within this READ ME.
Okay, let's go back to the top.
So the main setup instructions.
In this course, we're going to be leveraging Kali Linux.
This should be an environment that is somewhat
familiar to security professionals.
Specifically, we're going to leverage Kali 2020.1.0.
As far as getting your environment instantiated, you have two options.
The first option, VM with everything installed, is the preferred method.
That's because everything has already been baked into the virtual machine.
Option #2 is to install everything yourself.
This definitely is doable,
and we're actually going to be leveraging option #2 so we
can walk through the install script.
One other item I wanted to note is the GitHub Actions setup instructions.
This is a little bit of an advanced area,
and this tutorial is meant to be very concise.
So instead of me spending half of the tutorial showing you how to set it up,
you can also just follow these directions here.
Okay, great.
Let's check out the install script.
Before we check out the install script,
we need to clone the tutorials repo and cd into the repos directory.
Okay, nice.
Let's now check out the install script.
Okay, lets scroll down a little bit to get into the meat of the install script.
First, we deduce the current distro's name.
Then we get into the good stuff,
and we install Trivy and miscellaneous dependencies needed for Trivy.
My hope is that you can leverage this for inspiration.
However,
let's just say you aren't on a Debian‑based Linux distro, go to the Trivy
link and check out various installation instructions.
You can also find this in the course notes.
We also see container‑diff being installed.
We're going to be leveraging container‑diff to inspect container images that
have been tampered with. More on this a little bit later.
Okay, we install Docker if it's needed, and that's
about it. And we get out of the script.
All right, let's run the installer. Bingo, installation finished.