Global security at maximum velocity: Multi-Region and hybrid DevSecOps
summary
JFrog shows how to migrate on-prem dev infrastructure to AWS while enforcing DevSecOps using Artifactory + Xray, JFrog Pipelines, Distribution and Connect with Edge nodes for multi-region replication; claims 7,000 customers, up to 38 global instances, and that 85–90% of code is third‑party with 75% containing at least one major vulnerability and a 650% rise in supply‑chain attacks. Live scans surface API keys in /root/.ash_history, a container phoning home, applicability checking for CVEs, and new Terraform/IaC and secret‑detection features.
AI-written summary · about
chapters (11)
- 0:00Introduction and speaker background
- 1:25Software supply chain security basics
- 3:13Risks of transitive dependencies
- 5:41Software Bill of Materials explained
- 7:23JFrog DevSecOps platform overview
- 9:13Artifactory and Xray core products
- 11:21Developer-focused security tools
- 13:28Docker container security scan demo
- 15:31Secrets and exposure detection
- 16:53Container layer analysis and remediation
- 17:35Q&A and demo location
related talks
01h 13mAddressing the Software Explosion
29mFrom Vulnerabilities to Vigilance
36mJFrog Platform Innovation: Reloading Development Teams
07mJFrog Sponsored Session - Narasimha Pai, JFrog
36mElevating Innovation: GitHub & JFrog Paving the Way Forward
29mManaging the AI Surge
32mFrom Code to Trusted Release
28mDevSecOps - Security from Scratch