DevSecOps Stories
summary
Panelists describe concrete DevSecOps work: building and deploying a catalog of base container images to customers, integrating image scanning and containerd into CI/CD pipelines over more than a year, and ingesting full traffic to validate DoS mitigations. They recount a tiny 100-line C service running on Borg with protobufs not stored, and discuss supply-chain threats by outlining five attack points (commit, build, artifacts, deploy, dependencies) while comparing in-house security versus providing security as an internal service.
AI-written summary · about
chapters (7)
- 0:00Introduction
- 1:03DevOps security challenges
- 6:03Shared security responsibility
- 10:53Security in CI/CD
- 15:04Security culture role
- 22:47Why adopt DevSecOps
- 25:40Closing
related talks
46mWhat Security People Want: Making DevSecOps Happen with Containers
30mDevSecOps: More Than Just Pipelines
31mDevOps: You Build It, You Secure It
45mSo Happy Together: Making the Promise of DevSecOps a Reality
45mDevSecOps : add Security to your DevOps!
39mThe Path Of DevOps Enlightenment For InfoSec
36mDevOps Security - Is It Really So Difficult?
30mHandling Security Objections to DevOps