Day 2 Ignites - DevOpsDays Singapore 2024
summary
Pipeline-first defense that runs SCA, container and cloud scans into a single JSON feed and uses comest + Open Policy Agent rules to fail builds based on fixability or specific CVEs; shows triage by count and whether fixes exist. Progressive delivery demos use Argo Rollouts + Prometheus to ramp 5–10% canaries automatically and promote on metric analysis. Proposes a six‑week “surge Sprint” to reduce ceremony, argues AI as a DevOps assistant with human‑in‑loop, and describes AI security engineers at levels 0–5 with level 3 underway. Nginx Plus shown as API/gateway and app protection.
AI-written summary · about
chapters (6)
- 0:00Preventing Cloud Security Misconfigurations and Application Vulnerabilities by Pas Apicella
- 5:01Progressive Delivery with Argo Rollouts: The Future of Deployments by Abhishek Veeramalla
- 9:37Anti Agile Movement by Ned Lowe
- 14:38Is AI the new DevOps? by Harish Pillay
- 19:29The Rise of AI Security Engineers by Stefan Streichsbier
- 24:13Code Strong, Hack-Proof: Elevate DevOps Journey with API Security, Containers, and Traffic! by Minh Nguyen
related talks
59mDevOps for the Discouraged
01mDevOps.js Conference — February 15-16
02mAgile India 2025 - Day 3 highlights
30mDevSecOps: More Than Just Pipelines
37mDevSecOps Guide to Bulletproof Your Development Workflow
23mTrue DevSecOps with People, Processes, and Technologies
30mIntelligent Pipelines: Bringing AI/ML into DevSecOps Automation
43mBuilding and deploying secure apps by “shifting left”