A practical guide to implementing out security for your projects
summary
A hands‑on walkthrough of using projen to add automated SCA and static analysis workflows, generate tasks that run locally with npx projen, and publish a JSII project to npm. The demo builds a security scan component wired to a SCA tool (transcribed as "snake"), finds and fixes a bug where continue‑on‑error was hardcoded true, releases v0.015, and shows two consumer projects (TypeScript "tofu soup" and Python "noodles") auto‑updating to the new release via CI cron and manual churn.
AI-written summary · about
chapters (24)
- 0:00Introduction
- 1:07Security terms and CI/CD
- 2:34Projen introduction
- 3:59Traditional config problems
- 4:40Projen solves config
- 5:23Getting started with Projen
- 6:27Projen project types
- 7:09Core Projen concepts
- 8:14Security scanning in CI/CD
- 9:15Live demo setup
- 10:16JSII for multi-language
- 11:22Live demo: project structure
- 12:50Projen files and constraints
- 13:12Security scan component
- 14:40Local security scan task
- 15:29GitHub Actions security scans
- 17:17Fixing CI workflow bug
- 18:43Updating Projen project
- 19:26Live demo: merging changes
- 20:50Verifying GitHub Actions
- 21:10Publishing to npm
- 21:57Updating dependencies
- 23:02Automatic dependency upgrades
- 24:35Summary
related talks
47mImproving the Security of a Large Open Source Project One Step at a Time
58mPractical Secure Development and Operations with JavaScript in 2020
01h 01mUseful Tools and Utils for JS Development
17mA developer's take on security
52mBest Practices for Developers to Master Security
31mFrom Noise to Notes: Orchestrating SAST with Developers... (Adrián Puente Z.)
45mLeveraging Projects and Tools to Transform Your SDLC
48mImproving the Security of a Large Open Source Project One Step...