Keynote: Why Developer Laptop Security is Key to Securing Your CI/CD Pipeline
summary
Developer laptops are the highest value entry point into CI/CD because attackers can steal SSH keys credentials and tooling access and pivot into build servers and cloud; LastPass incident left dev environment compromised for over four days. The talk lays out concrete telemetry to collect: rich socket and process events, image and registry scanning, secret scanning, and audits for vulnerable software packages and malicious Chrome extensions, then correlates those signals into dynamic trust scores for zero trust access to CI/CD and cloud.
AI-written summary · about
related talks
06mSponsored Keynote: Why Developer Laptop Security is Key to Securing Your CI/CD Pip...
21mSecurity That Enables: Breaking Down Security Silos in the DevOps Ecosystem
10mKeynote: CloudNativeDevSecOps
48mSecurity Basics for Developers (and Not Only Developers)
01h 00mContinuous Intrusion: Why CI Tools Are An Attacker's Best Friends
49mFrom Application Security to Developer Security
25mKeynote: DevOps - The Return of Security
37mThe top list of securing your developer workstation