Lightning Talk: It’s pronounced ‘DevOps.’ The ‘Sec’ is silent.
summary
Argues that the number of reported CVEs rises 3–4x over the last decade, so manual end‑of‑pipeline fixes don’t scale and automation is essential. Uses container ephemerality to show why patch‑and‑rebuild workflows replace VM hardening and why security must shift left into CI/CD. Warns that if policy tooling is painful developers take the “gumdrop path,” so teams must deliver a continuous, developer‑friendly platform that embeds scanning and remediation points.
AI-written summary · about
chapters (5)
- 0:00What is DevOps
- 1:00Why DevOps matters
- 2:07Conclusion
- 2:37Automating Security
- 4:00Developer Friendly Platforms
related talks
31mDevOps: You Build It, You Secure It
48mDevOps Is Automation, DevSecOps Is People
25mKeynote: DevOps - The Return of Security
31mWhy SecDevOps is the new way in Cybersecurity?
23mDevSecOps - By Any Other Name
36mUnderstanding the Sec in DevSecOps: Beyond Just Shifting Left
22mShifting left, how security fits into the DevOps story
32mHow to fit Sec into DevOps without Security team