Keep Your Enemies Close and Your Secrets Closer
summary
A reusable Azure DevOps Marketplace extension wraps Yelp detect-secrets into pipelines, ingests CLI reports into the Azure dashboard and auto-creates backlog bugs; a demo scans OWASP WebGoat and flags about 150 secrets so results are visible line‑by‑line. The architecture standardizes config, converts reports for dashboard consumption and lets teams choose whether findings fail builds or become warnings while proving credential scanning can be plugged in and scaled across projects.
AI-written summary · about
chapters (11)
- 0:00Introduction
- 1:39Security tooling importance
- 3:25Security missteps in dev
- 4:48Adversarial security mindset
- 6:14Security in DevOps pipelines
- 8:01What is DevSecOps
- 9:48Scalable security tools
- 14:03Secrets scanner demo
- 18:24Azure DevOps integration
- 19:48Forward-thinking security
- 20:52Software and security future
related talks
44mAzure DevSecOps
39mHow to steal Azure DevOps secrets
56mSeamlessly integrate security throughout your code to cloud workflow
46mShip-It safely with GitHub Advanced Security
20mDeliver Secure Software with Azure Devops & Github
42mAzure DevOps security - Lessons learned
49mAzure DevOps security - Lessons learned
50mBest Practices for Securing CI/CD Pipelines