Security, Standards and Maintenance: How to Do It with 5k Repositories?
summary
Managing security, standards and maintenance across more than 5,000 repositories and hundreds of global contributors; specifically for a banking platform made of mobile apps and microservices. The talk explains using automation, shared tools and standardized processes to scale good practices, keep code quality and enforce security at large scale.
AI-written summary · about
chapters (26)
- 0:00Introduction
- 1:26Massive development challenges
- 3:16Backend tech stack
- 4:41Technical libraries and standardization
- 7:10Maven dependency management
- 8:57Parent POM and updates
- 10:20Static analysis plugins
- 11:46Dependency security enforcement
- 13:53Vulnerabilities and updates
- 15:39Forced update mechanisms
- 17:49Successful migrations
- 18:55Mobile context and challenges
- 20:18Monolith compilation issues
- 22:05Splitting into libraries
- 24:35Mobile ecosystem control
- 26:22iOS Parent POM strategy
- 27:46Library baselines and contracts
- 28:51License control and documentation
- 30:15Key benefits and results
- 32:04Unified architecture and reuse
- 33:55Support for new tech
- 35:17Team and tech synergies
- 36:01Q&A on hotfixes and versions
- 38:29API and internal library versioning
- 40:17Vulnerability detection and coverage
- 41:21Development guides and design patterns
related talks
33mInventory That: Building an Automated DevSecOps for 40K Repositories
17mBuilding Secure Open Source Communities From the Ground Up
39m5 Open Source Security Tools All Developers Should Know About
17mGamify security best practices to scalably improve engineering culture
04mLightning Talk: Securing Your Source Repositories - 5 Tips to Get Started!
39mA Guide to Securing GitHub Based on Lessons Learned
32mNavigating a Mined World: Repositories, Registries and Artifact Storages.
25mMaintaining Agility and Security without Impacting Developer Experience