Making DevSecOps a Reality in Your Spring Applications
summary
Demonstrates integrating Spring demo applications into a Jenkins pipeline that runs static analysis, dependency checks and automated dynamic scans on every build, failing stages for critical issues. Shows a concrete demo app that exposes SQL injection and parameter flaws, counts vulnerable dependencies, and pushes results to dashboards and production monitors to enable automated security tests and build-gating by severity.
AI-written summary · about
chapters (7)
- 0:00Introduction
- 5:18DevSecOps challenges Spring apps
- 10:57Security in pipeline
- 17:54Production security controls
- 27:34Automation and monitoring
- 36:05Case studies
- 44:05Summary & Q&A
related talks
39mContinuous Security at the Next Level
45mAutomated Security Testing in a DevOps world
43mBuilding a Secure DevOps Pipeline
43mSecurity in DevOps Strategies
42mContinuous Security: Integrate security tools into your DevOps Pipeline
44mThe Implementation and Practice of DevSecOps
49mDevSecOps: tips and tricks.
43mBuilding and deploying secure apps by “shifting left”