DevSecOps from Zero to Hero!
summary
A practical overview of DevSecOps that explains how to integrate security across the software development lifecycle (SDLC). It covers challenges and benefits, automation and tool selection, and dives into specific security techniques and tools including secret scanning, software composition analysis (SCA), SAST, IaC analysis, container scanning, DAST, compliance checks and DevOps security controls, illustrated with OSS implementation examples and practical recommendations for starting or improving a DevSecOps program.
AI-written summary · about
chapters (11)
- 0:00DevSecOps intro
- 3:14Security from the start
- 7:54Common attack vectors
- 12:17Security culture & shared responsibility
- 18:2210 DevSecOps controls
- 33:43Key tools & acronyms
- 40:58GitHub security pipeline demo
- 1:07:22Q&A
- 1:10:33Lab setup: GitHub config
- 1:48:37Security automation best practices
- 1:54:40Conclusion
related talks
16mIntroduction to DevSecOps
49mDevSecOps but Secure! Developing More Securely, Continuously
39mDevSecOps: What, Why and How
45mDevSecOps : add Security to your DevOps!
30mDevSecOps: More Than Just Pipelines
31mDevSecOps, or How to Integrate Security into DevOps Practices
50mSeamless Integration of Security Practices into the DevOps Pipeline
36mUnderstanding the Sec in DevSecOps: Beyond Just Shifting Left