Security in DevOps Strategies
summary
Adds concrete security controls into the DevOps pipeline: enforce Jenkins access control and registry authentication, run static analysis (FindSecBugs, SensioLabs), dependency checks (OWASP Dependency‑Check), and container image scanning with Clair at build time, and perform nightly image rebuilds so patches reach running containers. Gate builds on critical findings, run dynamic scanners (Arachni, OWASP ZAP) against staging, prioritize critical alerts, and treat plugin supply‑chain risks as real.
AI-written summary · about
chapters (6)
- 0:00DevOps security intro
- 7:57DevOps risks
- 14:19Build system attack demo
- 27:50Vulnerability scan
- 36:35Summary
- 38:03Q&A
related talks
42mContinuous Security: Integrate security tools into your DevOps Pipeline
31mDevOps: You Build It, You Secure It
39mContinuous Security at the Next Level
27mMulti Security Checkpoints on DevOps Platform
45mDevSecOps : add Security to your DevOps!
39mSecurity Tooling in Your DevOps Pipeline
31mContinuous Security – integrating security into your pipelines
32mHow to fit Sec into DevOps without Security team