Developer-First Application Security and DevSecOps
summary
Claims a 50% compound annual growth in credential leaks and shows a demo workflow that moves from a static repo secret to secret scanning with a ~95% true‑positive detection and a push‑protection check that rejects commits. Demonstrates the OIDC-based Vault Action (v2.4) returning short‑lived tokens, config steps for Vault roles/policies, and integrations with HashiCorp Vault plus AWS, GCP, and Azure via GitHub Advanced Security so CI never needs long‑lived secrets.
AI-written summary · about
chapters (8)
- 0:00Introduction and speaker intro
- 2:13State of application security
- 5:00Credential security with secret scanning
- 9:58Demo: Secret detection workflow
- 10:39Demo: Push protection feature
- 16:39Demo: Static credential workflow
- 19:25Demo: OIDC integration with Vault
- 22:57Summary and next steps
related talks
39mSecurity in a DevOps World
25mIntegrating Vault with CI/CD pipelines: Best practices and pitfalls
46mThe Nightmare for Attackers: An Infrastructure without Secrets
45mAttackers' Nightmare: An Infrastructure Without Secrets
54mFrom App Security to Dev Security – Shift left with GitHub Advanced Security
29mIntro to secrets management using Vault
38mKeeping Secrets - A Practical Approach to Managing Credentials
33mIterative Security...