Explore security DevOps strategies for maintaining security in agile projects through this conference talk from AppSecEU 2015. Dive into four different axes of security implementation, including dynamic depth, static depth, intensity, and consolidation. Learn how to integrate tools like ZAP, Jenkins, BDD-Security, and Gauntlt into your CI/CD pipeline. Discover techniques for guiding security tools into post-authentication scenarios, conducting backend scans, and handling special workflows. Examine methods for consolidating security reports, flagging builds, and incorporating code coverage analysis. Gain insights on balancing security measures with agile development practices to ensure robust application security throughout the development lifecycle.
Security DevOps - Staying Secure in Agile Projects