DevOps Meet Sec: Your Journey To Delivering Secure Code Fast
summary
Claims that embedding security into DevOps yields faster, cheaper protection and lists top nine pitfalls with concrete fixes. Recommends starting small with SAST and SCA (scan production code only, manual scan then automate), uses CI/CD hooks, hardened actions/runners, merge‑request questionnaires and a repo ossf scorecard to improve Git security posture. Cites a GitLab survey of 5,000 and a jump in developer‑detected vulnerabilities from ~1–24% to 25–49%. Describes a security champions program, hands‑on labs and measurable reductions in noise.
AI-written summary · about
chapters (7)
- 0:00DevSecOps journey
- 4:04DevSecOps lagging behind
- 12:01DevSecOps pitfalls
- 29:24Security approvals bottleneck
- 31:14Threat modeling in fast cycles
- 34:45Hands-on security training
- 36:10Secure DevOps takeaways
related talks
32mHow to fit Sec into DevOps without Security team
01h 02mDevSecOps for Developers: How To Start
31mDevOps: You Build It, You Secure It
39mDevOps: The Return of Security
40mDevSecOps Guide to Bulletproof Your Development Workflow
34mDevSecOps: How to Use DevOps to Make You More Secure
45mDevSecOps : add Security to your DevOps!
06mDevSecOps – Security Throughout the DevOps Pipeline