Minimum Viable Security
summary
Claim: a small, automated baseline of security controls can be baked into configs and CI to catch most obvious risks early. Demonstration adds seven tools to a FastAPI microservice repo and GitHub Actions pipeline — bandit, gitleaks, safety, checkov, zap, trivy and a custom MFA check script — producing artifacted reports, failing checks that block a PR, and a runnable container for ZAP scans. Result: practical hygiene with clunky developer UX today but effective prevention and audit data in place.
AI-written summary · about
chapters (6)
- 0:00Start
- 3:57Protecting your perimeter
- 12:20Minimum Security Controls
- 15:01Infrastructure misconfiguration
- 15:27Pentesting
- 25:11A Minimum Viable Security plan (2)
related talks
20mMinimum Viable Security for Python Applications
30mMinimum Viable Security for Cloud Native Stacks
29mSecuring Your Web Application Pipeline From Intruders
52mApplication Security at DevOps Speed and portfolio scale
39mSecurity Tooling in Your DevOps Pipeline
46mSecurity DevOps - Staying Secure In Agile Projects
42mContinuous Security: Integrate security tools into your DevOps Pipeline
20m5 Open Source Cloud Native Security Tools