Explore advanced developer tools and automations for enhanced security
summary
Fortinet shows FortiDevSec and FortiDAST wired into GitHub Actions to run SAST and a five‑hour DAST (Juice Shop) scan that finds 12 vulnerabilities and a risk rating of 7; FortiSOAR automates triage and can raise GitHub issues and place a FortiGate to block traffic, claiming a 98% reduction in incident remediation time. FortiGateCNF requires a managed identity with specific RBAC and a service principal; FortiGate deploys successfully from ARM to Bicep (via VS Code) using Terraform/ARM outputs.
AI-written summary · about
chapters (12)
- 0:00Advanced security tools intro
- 1:15FortiDevSec & FortiDAST overview
- 3:05FortiDevSec in GitHub setup
- 5:36Connecting to repo workflow
- 7:42Scan results & remediation
- 8:24FortiDAST penetration testing
- 10:10FortiSOAR incident response
- 12:16FortiGateCNF with IaC
- 14:43Azure components for FortiGateCNF
- 15:25FortiGate deployment with Bicep
- 18:41FortiGate config access
- 19:03Featured solutions & closing
related talks
21mCloud Security from Left-to-Right Intelligent Integrated Automated
39mGHARF：GitHub Actions RedTeam Framework
27mManaging cloud risk with Fortinet cloud security
28mHow Fortinet uses AWS services to deliver a secure cloud experience
55mReal-life automation and security best practices from the field
01h 41mDevSecOps with GitHub Advanced Security (GHAS)
20mA Practical Guide to CI/CD Security Gating
36mElevating Innovation: GitHub & JFrog Paving the Way Forward