Главная
Study mode:
on
1
Intro
2
DevOps security settings
3
Where are the secrets? (1)
4
What are variable groups
5
Access levels explained (Variable groups and secure files)
6
Resource authorization
7
Preventing pipeline modification
8
Build agent user - The master ring
9
Job authorization scope settings
10
Azure KeyVault
11
Repeat task
12
Environment resources - simplify on-prem deployment
Description:
Save Big on Coursera Plus. 7,000+ courses at $160 off. Limited Time Only! Grab it Learn how to protect Azure DevOps secrets in this conference talk from NDC London 2023. Explore the vulnerabilities in CI/CD platforms, particularly in handling sensitive configuration data like service account credentials and database connection strings. Discover where secrets are stored, understand variable groups, and delve into access levels for variable groups and secure files. Examine resource authorization, methods to prevent pipeline modification, and the significance of build agent user permissions. Investigate job authorization scope settings, Azure KeyVault integration, and the use of repeat tasks. Finally, learn about environment resources and their role in simplifying on-premises deployment. Gain crucial insights into DevOps security to safeguard your application's sensitive information throughout the development and deployment process.

How to Steal Azure DevOps Secrets

NDC Conferences
Add to list
0:00 / 0:00