DevSecOps Transformation at Speed and Scale Using Tekton
Talkat ContainerCon @ Open Source Summit Europe 2024 · on Tuesday, 2024-09-17· at 16:00· Room 0.14 (Level 0)·
summary
IBM uses Tekton as the orchestrator and assembles Clair, SonarQube and OWASP ZAP into opinionated CI, CD and a Continuous Compliance (CC) pipeline that scans daily, autoopens PRs for minor fixes and auto-closes resolved issues. A centralized platform on IBM Cloud with Salsa level 3 build attestations, an evidence locker auditable to NIST 800-53, a pipeline log analyzer, a WatsonX chatbot and a self‑service onboarding portal reduces onboarding from weeks to under an hour and has onboarded 150+ teams, saved ~50 person‑years, run by a team of under 20 and contributing upstream Tekton enhancements.
AI-written summary · about
chapters (20)
- 0:00Intro
- 1:07Conclusion
- 1:59IBM Commitment to Tekton
- 2:28History of Tekton
- 6:26IBM DevSecOps Platform
- 7:01Security Compliance Capabilities
- 8:46Whats Under the Hood
- 9:52Developer Experience
- 11:44enhancements to Tekton
- 13:25Task enhancements
- 14:53Pipeline log analyzer
- 16:36Lean Startup strategy
- 17:23DevSecOps Transformation
- 19:41IBM Concert
- 20:14Growth Outcomes
- 21:59Shift Away from Development Teams
- 23:29How We Onboard Teams
- 25:19Questions
- 31:09More Questions
- 37:52Continuous Compliance Pipeline
related talks
48mDevSecOps Transformation at Speed and Scale Using Tekton
24mTest Orchestration using Tekton
22mHow the Tekton Community is Driving its Growth and Adoption
30mTwo Amazing Mainframe DevOps Transformation Case Studies
29mContinuous Integration and Continuous Delivery Pipelines: Just the Basics
26mMainframe DevOps Transformation Case Studies
15mA Case Study of Tekton’s Role in Continuous Deployment and DevSecOps Com...
22mHow the Tekton Community is Driving its Growth and Adoption