Building and deploying secure apps by “shifting left”
summary
Walkthrough of actual steps and demos: live pipelines run code scanning with Sonar and built‑in scanners, multi‑repo branching plus enforced pull‑request approvals, secrets pulled from Key Vault secrets moved out of code and injected into pipelines, container images scanned (Aqua/registry scanning) and quality gates block releases, dependabot auto‑fixes outdated packages, and overall posture aggregated into Defender for Cloud security posture — all shown in ~45 minutes with working demos.
AI-written summary · about
chapters (7)
- 0:00Introduction to DevSecOps
- 2:23Understanding DevOps and Its Importance
- 5:13Automating Development and Deployment
- 7:40Integrating Security into DevOps
- 14:04Demo: Azure DevOps and GitHub
- 20:34Advanced Security Practices
- 40:38Conclusion and Final Thoughts
related talks
54mFrom App Security to Dev Security – Shift left with GitHub Advanced Security
37mDevelop and implement a successful DevSecOps approach
37mA Secure Continuous Delivery Pipeline
56mSeamlessly integrate security throughout your code to cloud workflow
32mBuilding a Secure By-Design Pipeline with an Open Source Stack
07mCI/CD Evolution: Ensuring Security and Overview During Rapid Growth
40mSecure by Default: Building an AI-Augmented, OSS-Powered Reusable CI/CD Pipeline
55mGitHub + Azure: Better Together!