Security-as-Code to Accelerate DevSecOps, a Practical Guide to Get Started
summary
Practical checklist that codifies security into CI/CD: six practical steps for testing source and execution, infrastructure and IaC, micro‑networking and the software factory; concrete scanners recommended like SAST, DAST, dependency scanning and fuzzing and config checks for Helm/Terraform; runtime defenses such as Falco and AppArmor, container host and network security, CI commit‑time scans and audit trails; cites SolarWinds as why build‑process hygiene and secrets/registry access control matter and warns against cluster sprawl versus namespace segmentation.
AI-written summary · about
chapters (10)
- 0:00Introduction
- 0:33The rise of IaC
- 2:54Threats and challenges
- 5:10Six pillars of security
- 7:51Automating security testing
- 10:32Securing infrastructure
- 12:42Network security
- 14:41Hardening the factory
- 20:08Long-term strategy
- 23:14Conclusion and Q&A
related talks
45mDevSecOps : add Security to your DevOps!
39mSecurity Tooling in Your DevOps Pipeline
32mHow to fit Sec into DevOps without Security team
44mSecurity Practices Useful in Agile Development
37mDevSecOps Guide to Bulletproof Your Development Workflow
26mBeyond Testing: Application Security in the Age of DevOps
40mDevSecOps Guide to Bulletproof Your Development Workflow
38mDevOps Meet Sec: Your Journey To Delivering Secure Code Fast