Interview
summary
Teams explain how to move security into the delivery pipeline by adding fast, automated checks early, for example dependency scans against known CVE lists using bundler or npm and lightweight dynamic scans that in one anecdote generate 37,000 database entries when run unsafely. The recommended start is one quick, high signal test per pipeline stage, expose security tooling via APIs into CI, and treat security as code in the pipeline to avoid gatekeeper bottlenecks.
AI-written summary · about
related talks
42mContinuous Security: Integrate security tools into your DevOps Pipeline
39mSecurity Tooling in Your DevOps Pipeline
29mSecuring Your Web Application Pipeline From Intruders
31mContinuous Security – integrating security into your pipelines
19mApplication Security at High Velocity
43mBuilding a Secure DevOps Pipeline
34mEmbarking on Your Security Journey
31mSharing Security Secrets: How to Encourage Security Advocates