Panel: Securing the Golden Path: Adding Guardrails for Developers Without Getting in Their Way!
recording made private on YouTubehttps://youtu.be/kXZ25zOqj5k
summary
Panelists describe concrete guardrails: an internal developer platform with declarative Kubernetes templates, admission controllers and runtime enforcement, image and repo scanning, CIS benchmark checks, and a Kyverno 200 sample policies library driving automated rejection of misconfigurations. CI/CD integrates IDE plugins to shift scans left (IDE feedback vs daily or per-build scans), and Git becomes the source of truth via GitOps as system of record. Compliance maps into machine-readable standards like OSCAL compliance-as-code so automated observability and policy depots let teams deploy in minutes while keeping baselines enforced.
AI-written summary · about
related talks
31mPanel Discussion: Platform and Developer Productivity - Trends and Challenges
27mSecurity: The Thing That Everyone...
39mThe Art of (Cloud Native) Defense: Pillars of Kubernetes Security
26mEverything You Should Be Doing, But Aren’t: DevSecOps for K8s Workflows
22mKeynote Session: Compliance at the Point of Change: Security and Dev..
26mPlatform Engineering Loves Security: Shift Down To Your Platform, Not Left To Your Developers! - Maxime Coquerel, Royal Bank of Canada
29mSecuring the platform: Hard-won lessons from the teams who've been breached, scaled, and survived
38mDevSecOps Panel "AppSec Would Never Catch Me"