Continuous Integration, Continuous Delivery. Continuous Security?
Talkat Continuous Delivery Summit 2019 - San Diego · on Monday, 2019-11-18· at 23:55· San Diego Convention Center - Room 1, 131 W Harbor Dr·
summary
Argues for embedding Snyk-style scanners into CI/CD to fail the build on unacceptable risks, letting security define enforceable rules that stop vulnerable code from reaching production. Automation scales a tiny security team—roughly one security person versus dozens or hundreds of devs—by equipping developers to fix issues themselves. Recommends measuring the delta (no new problems introduced) then iterating to prevent new problems and produce incremental, visible security improvement.
AI-written summary · about
related talks
31mContinuous Security – integrating security into your pipelines
42mContinuous Security: Integrate security tools into your DevOps Pipeline
37mA Secure Continuous Delivery Pipeline
18mContinuous Security - Building Security into your Pipelines
39mContinuous Security at the Next Level
40mDevSecOps Guide to Bulletproof Your Development Workflow
50mBuilding a continuous secure delivery pipeline
27mSecurity Learns to Sprint: DevSecOps