The Human-Free Software Factory: Removing Threat
summary
Argues for a concrete human‑free pipeline where humans only touch source code and production is updated by CI/CD with checksummed artifacts; shows an Azure Git + Azure Pipelines flow, Habitat builder pushing to an artifact store as source of truth, two‑person commit rule, Chef InSpec/Inspect for compliance and Vault/keyless for secrets. Removes SSH and RDP to prevent remote login. Demo mostly runs but notes real failures (self‑lockouts) and practical workarounds like break‑glass and artifact rollback.
AI-written summary · about
chapters (10)
- 0:00Start
- 0:36Who Am I
- 6:55Layers of Configuration Management
- 8:07Code and System Integrity
- 8:31Integrity Checks
- 9:15Remove Human Access from Production
- 20:08Using Azure Git with Azure Pipelines
- 22:12Examples of How Automation Worked for You
- 22:23Failures
- 25:59Do You See a Difference between Using Azure Versus Aws Versus Gcp
related talks
33mThe Human-Free Software Factory: Removing Threat
43mThe art of secure software: Zero-trust delivery pipelines
40mSecure by Default: Building an AI-Augmented, OSS-Powered Reusable CI/CD Pipeline
51mThe Build Release Pipeline Model for Mere Mortals
23mBuilding a Secure By-Design Pipeline with an Open-Source Stack
17mNo More Walled Gardens: Removing Barriers with SCM...
38mSecuring your CI/CD Pipeline
32mFrom Code to Trusted Release