Continuous Security at the Next Level
summary
Describes automating security inside CI/CD pipelines by integrating concrete tools and checks instead of external reviews: dependency scanning that found open-source components with an average age of ~2000 days, image scanning pushed to registries, and a live interceptor proxy capturing attack traces and feeding them into tests. Demonstrates a Jenkins plugin for Java and .NET, container- and Kali-based exploits (SQL injection, remote command execution) used as failing quality gates, and dashboards/reports that break builds when issues are detected.
AI-written summary · about
chapters (7)
- 0:00Introduction
- 6:19Security in pipelines
- 12:05Security testing and gates
- 20:27Capture the flag
- 27:59Security tools and proxy
- 31:23Security dashboards
- 36:37Security tools feedback
related talks
42mContinuous Security: Integrate security tools into your DevOps Pipeline
31mContinuous Security – integrating security into your pipelines
43mSecurity in DevOps Strategies
18mContinuous Security - Building Security into your Pipelines
20mAI-Driven Security as Code in Jenkins
34mContinuous Security - Integrating Pipeline Security
37mA Secure Continuous Delivery Pipeline
32mAutomating Security Compliance at Scale