DevSecOps - Security from Scratch
summary
Argues that the fastest risk reduction is scanning dependencies from the IDE to the registry to the image and gives concrete tooling: JFrog Xray + Artifactory, an IDE plugin (IntelliJ/VS Code/Eclipse), REST API/webhooks, and a Kubernetes admission helper (cuben). Shows policy→rule→watch flow, a live scan that surfaces ~400+ violations, actions like block-download or fail-build, and a workflow to rescan running images and trigger cluster redeploys. Claims a full trial can be standing in 10–15 minutes.
AI-written summary · about
chapters (8)
- 0:00Introduction to DevSecOps
- 1:03Security layers from code to Kubernetes
- 9:39IDE plugin for dependency scanning
- 12:57Docker image security scanning
- 16:55Defining policies and watches
- 20:51Kubernetes security best practices
- 24:45Integration with existing systems
- 27:56Trial setup and next steps
related talks
35mPractical DevSecOps for private and open source projects
45mDevSecOps : add Security to your DevOps!
13mUnderstanding DevSecOps: Risk defense across your SDLC
37mDevSecOps Guide to Bulletproof Your Development Workflow
30mDevSecOps: More Than Just Pipelines
40mDevSecOps Guide to Bulletproof Your Development Workflow
43mSecurity in DevOps Strategies
32mHow to fit Sec into DevOps without Security team