Developer-Driven Security: Owning your projects from inception to commercialization
summary
Claim: embedding policy and component intelligence into dev tools removes the late-stage surge of unplanned work. Evidence: 90% of apps use OSS, a React install can pull 1,000+ deps, and manual component approval takes six to eight weeks. Built: a Nexus-based repository + component firewall, OSS Index feeds, and plugins (auditjs, dependency-check) that auto-create applications and quarantine bad packages so builds fail fast. Outcome: upgrades become targeted and automatable, not a huge surprise. early everywhere at scale
AI-written summary · about
chapters (4)
related talks
23mOSS for enterprises: Procure Secure Components Faster with Superior Developer Experience
25mMaintaining Agility and Security without Impacting Developer Experience
43mDeveloper Driven Security In High-Growth Environments
25mSecurity First
52mApplication Security at DevOps Speed and portfolio scale
54mFrom App Security to Dev Security – Shift left with GitHub Advanced Security
28mDevSecOps - Security from Scratch
40mEmbracing Security - A Changing DevOps Landscape