DevSecOps : What, Why and How

on YouTube ↗53m

" summary

Shows how to convert a DevOps pipeline into DevSecOps using free/open-source tools, with demos. Covers building DevSecOps pipelines across on‑premise, cloud‑native, and hybrid deployment environments and explains the benefits of that transformation.

AI-written summary · about

" chapters (6)

1. 0:00Start
2. 22:34Software Composition Analysis OWASP Dependency Check
3. 25:29DAST OWASP ZAP Scan
4. 26:39Infrastructure - Clair & OpenVAS
5. 27:33Compliance - Auditing Tomcat with Inspec
6. 43:35Scenario 1 SSH Bruteforce Attack

" related talks

• 39mDevSecOps: What, Why and HowAnant Shrivastava · Black Hat Asia 2019
• 49mDevSecOps but Secure! Developing More Securely, ContinuouslyFrank Pientka · JCON 2020
• 30mDevSecOps: How Secure Is Your Pipeline?Jaqueline Ramos · DevDay 2019
• 30mDevSecOps: More Than Just PipelinesTanya Janca · Conf42 DevSecOps 2023
• 50mSeamless Integration of Security Practices into the DevOps PipelineAndrey Ivanov · Saint HighLoad++ 2022
• 36mHow to Turn DevOps into DevSecOpsMoises Margotto · DevOpsDays Vitória 2020
• 16mIntroduction to DevSecOpsArthur Havlicek · BDX I/O 2022
• 38mDevSecOps - what does it mean and where is it taking us?Seb Rose · Craft Conference 2022