Shifting left, how security fits into the DevOps story
summary
Argues that security belongs everywhere in the development lifecycle, not just "shifted left," and recommends distribute security across SDLC by automating repetitive checks. Recommends integrating code scanning and vulnerability detection into CI so builds fail on findings and are sent back to developers; mentions container scanning, web application firewalls, dependency bumping for fixes, and putting security tests in pipelines. Mentions recordings from a cloud engineering summit are available online.
AI-written summary · about
chapters (11)
- 0:00Introduction
- 0:36The role of automation
- 1:33Human limitations
- 3:26Setting the agenda
- 5:36Defining DevOps
- 6:39Security in the SDLC
- 13:52Q&A session
- 14:55Security tooling strategies
- 17:24Automating security audits
- 19:02Cloud engineering summit
- 20:39Closing remarks
related talks
36mUnderstanding the Sec in DevSecOps: Beyond Just Shifting Left
30mThe 3 Ways of DevSecOps – Making Shift Happen
30mHandling Security Objections to DevOps
06mDevSecOps – Security Throughout the DevOps Pipeline
01h 04mShifting Security Everywhere
31mWhy SecDevOps is the new way in Cybersecurity?
16mDevOps and Security
31mDevOps: You Build It, You Secure It