DevSecOps Transformation at Speed and Scale Using Tekton
summary
Centralized CI/CD platform uses Tekton as the orchestrator with Clair, SonarQube and OWASP ZAP for dependency, SAST and DAST checks, and a Continuous Compliance pipeline that scans daily and can auto-remediate or auto-close incidents; self‑service onboarding provisions teams in under an hour and a team of fewer than 20 supports 150+ teams onboarded, saving developers roughly 50 person‑years by shifting 10–40 developer hours/week into the platform; platform enforces SLSA level 3 builds, contributed Tekton enhancements (parallel tasks, conditional execution) and a pipeline log analyzer.
AI-written summary · about
chapters (20)
- 0:00Intro
- 1:07Conclusion
- 1:59IBM Commitment to Tekton
- 2:28History of Tekton
- 6:26IBM DevSecOps Platform
- 7:01Security Compliance Capabilities
- 8:46Whats Under the Hood
- 9:52Developer Experience
- 11:44enhancements to Tekton
- 13:25Task enhancements
- 14:53Pipeline log analyzer
- 16:36Lean Startup strategy
- 17:23DevSecOps Transformation
- 19:41IBM Concert
- 20:14Growth Outcomes
- 21:59Shift Away from Development Teams
- 23:29How We Onboard Teams
- 25:19Questions
- 31:09More Questions
- 37:52Continuous Compliance Pipeline
related talks
48mDevSecOps Transformation at Speed and Scale Using Tekton
15mA Case Study of Tekton’s Role in Continuous Deployment and DevSecOps Com...
29mContinuous Integration and Continuous Delivery Pipelines: Just the Basics
22mHow the Tekton Community is Driving its Growth and Adoption
22mHow the Tekton Community is Driving its Growth and Adoption
45mTekton - Native CI/CD for Any Public and Private Cloud
47mTekton, a new approach to pipelines
39mDevOps to DevSecOps journey: what is possible to cover with free and open source tools