Главная
Study mode:
on
1
Intro
2
Patty Pipeline
3
Meet Tanya
4
About DevSecOps
5
AppSecOps
6
SSL Lab
7
Secret Store
8
Scan for Secrets
Description:
Explore DevSecOps practices with OWASP DevSlop in this conference talk from OWASP Global AppSec Tel Aviv. Learn about the "Patty the Pipeline" project, which demonstrates secure component management, secret retrieval from a secret store, and code validation through negative unit tests, DAST, SAST, and encryption and infrastructure verification. Discover how to implement DevSecOps principles using open-source tools like SSL Labs, White Source Bolt, Azure DevOps Security Toolkit, and OWASP Zap. Gain insights from speakers Nancy Gariché, founder of BDB Skills, and Tanya Janca, Senior Cloud Advocate at Microsoft, as they provide a comprehensive start-to-finish demo of each pipeline component. Access supporting videos and resources to enhance your understanding of DevSecOps and improve your own development pipelines.

DevSecOps with OWASP DevSlop

OWASP Foundation
Add to list
0:00 / 0:00