The Fifth Element : Azure Secure Devops
summary
Argues that security must be the Fifth Element in DevOps and gives concrete tools and workflows: cites the SolarWinds supply‑chain compromise that started with four lines of code changed, demonstrates threat modeling with the TMT/ThreatsManager exportable to HTML/Wiki, shows ARM TTK/ARM DDK and AzSK producing CSV checklists for templates, and wires secret scanning, CodeQL/Snyk/Dependabot and GitHub Advanced Security into CI so checked‑in credentials are flagged before merge. Shows DevBox and Codespaces for managed dev environments and Defender for Cloud/Containers linking image findings back to the CI run.
AI-written summary · about
chapters (10)
- 0:00Introduction and welcome
- 1:14The Fifth Element concept
- 4:01Four pillars of secure development
- 8:16Secure design principles
- 14:21Secure coding practices
- 25:56Developer tooling and environments
- 32:38Shift left security movement
- 45:59Secure building and testing
- 59:23Secure deployment strategies
- 1:01:07Monitoring and final tools
related talks
30mThe Fifth Element : Azure Secure Devops
44mThe Fifth Element : Azure Secure DevOps
25mSecuring Your DevOps Transformation
25mKeynote: DevOps - The Return of Security
45mDevSecOps : add Security to your DevOps!
31mDevOps: You Build It, You Secure It
30mHandling Security Objections to DevOps
28mImplementing Critical Cybersecurity Controls in a DevOps Environment