Devil is in the details: Microservices, Security and DevOps
summary
Argues that security moves from days to minutes by embedding checks into CI/CD, demonstrating an open‑source DevSecOps Studio that simulates GitLab CI, runners, Docker images and a staging VM provisioned with Ansible and Inspec. Shows automated linting and hardening, secret scanning (detects a hard‑coded Django SECRET), dependency checks flagging Django 1.8.3, static analysis via Bandit and SSL scans, and says microservice scans finish in ~10–15 minutes versus ~10 days for a monolith.
AI-written summary · about
chapters (7)
- 0:00Start
- 3:16Traditional SDLC
- 13:08Traditional Secure SDLC
- 25:58DevOps: Typical Activities
- 26:28DevOps: Typical Security Activities
- 29:17Security Champions
- 33:37Static Analysis tools
related talks
38mDevOps Meet Sec: Your Journey To Delivering Secure Code Fast
31mDevOps: You Build It, You Secure It
32mHow to fit Sec into DevOps without Security team
28mAttacking the microservice systems: methods and practical tips
31mDevSecOps, or How to Integrate Security into DevOps Practices
01h 02mDevSecOps for Developers: How To Start
45mDevSecOps : add Security to your DevOps!
39mDevOps: The Return of Security