What Is Devsecops? Key Steps to Do It Well
summary
Clear checklist: concrete payoff, the tooling and the counts. Flow Health uses Snyk — ~3,000 critical vulnerabilities flagged monthly plus SonarCloud/SonarQube and OWASP ZAP integrated into CI/CD, reporting and auto‑ticketing. Adoption reaches 75–80% shift‑left coverage, scans most of the codebase quickly, reduces tech debt and security bottlenecks, and creates policy stage gates that auto pass/fail releases. Practical demos, integration tips, and measurable ROI drive whether to watch.
AI-written summary · about
chapters (11)
- 0:00Introduction
- 1:05Leos background
- 1:58What is Devsecops
- 4:27Implementing Devsecops
- 5:40Roles and Responsibilities
- 9:43Sneak
- 11:17Why is Devsecops Important
- 13:37Top 10 Risks
- 16:05Measuring Success
- 19:35Questions
- 21:17Good Practice
related talks
30mDevSecOps: More Than Just Pipelines
32mHow to fit Sec into DevOps without Security team
32mDevSecOps is Dead, Long Live DevSecOps
31mDevSecOps, or How to Integrate Security into DevOps Practices
34mDevSecOps: How to Use DevOps to Make You More Secure
27mDevSecOps: How to Use DevOps to Make You More Secure
45mDevSecOps : add Security to your DevOps!
44mThe Implementation and Practice of DevSecOps