Trusted Software Supply Chain with JTE
Talkat Cloud Native Security Day 2019 · on Monday, 2019-11-18· at 09:50· Marriott Marquis San Diego Marina - San Diego Ballroom A, 333 W Harbor Dr·
summary
Enterprise pipeline approach that stitches dependency scanning, SCA, SAST, container/image scanning, DAST and continuous compliance into automated CI/CD using Nexus, SonarQube/Fortify, Falco, Selenium, Helm, Ansible and Jenkins. Claims a reusable, tool‑agnostic Jenkins Templating Engine as open source, applied across ~60 microservices, and reduces pipeline dev time 4–6 months → 4–6 days. Templates plus modular libraries enforce governance, centralize gold base images and artifact scanning, and let teams choose tools while maintaining consistent pipeline logic.
AI-written summary · about
chapters (10)
- 0:00Introduction
- 0:54What is DevOps
- 2:36Application dependency scanning
- 4:59Code scanning
- 6:11Container image scanning
- 8:33Security vulnerabilities
- 13:06Automation
- 21:20Jenkins Templating
- 23:11Value
- 25:21Demo
related talks
30mSupply Chain Security with the Jenkins Templating Engine!
32mHow to implement a DevSecOps pipeline with zero-trust
35mBuilding Reusable DevSecOps Pipelines on a Secure Kubernetes Platform
39mContinuous Security at the Next Level
42mJenkins: Enabling Agility and Efficiency
33mMaking Strides towards Enterprise-Scale DevOps...w/ Jenkins in Your Tool Chain
20mAI-Driven Security as Code in Jenkins
30mA Journey Introducing Jenkins to Enterprise IT